Error   test

Certification Time

Posted August 4, 2007 at 07:08pm in Computers, Programming, Security

For a while I have been keeping my eye on certifications I would like to obtain in the next few years. Being honest with myself it really is just a goal because it would be very costly and time consuming to obtain all of them, not impossible, just difficult. What is a life without goals? however difficult they might be. After speaking with some security professionals on [H] I have added enough certifications to keep me busy for many many years. There are a number of certifications that you really cannot pass without real world experience, one I have heard of is the CISSP, which requires four years of experience (5 years effective Oct. 2007), however two years may be waived. One of my goals is to have the credentials that would land me contracts as a white hat so getting real world security experience is a priority anyway.

Below the list of certifications I have an additional list which outlines the certifications for the DoD directive 8570.1. This directive applies to individuals administering DoD machines. Of course the major problem with certifications is maintaining them, the more certifications you have the more difficult it can be since you have to recertify every so often. The list below is a broad list of certifications I am interested in, and while I would like to have them all the list will be narrowed over time. Lets say I get my RHCT, but when looking into Solaris more, I don’t have interest in working with Solaris or the other way around, ultimately reducing the list over time.

Now for the main list of certifications:

Since Red Hat has recieved its EAL4 certification with Labeled Security Protection Profile (LSPP) I added some of the Red Hat certifications to the list

DoD Directive 8570.1 Technical I

DoD Directive 8570.1 Technical II

DoD Directive 8570.1 Technical III

There are also a number of certifications under the SANS Global Information Assurance Certification that look very interesting. These certifications also seem to be more specific, an example being “GIAC Securing Oracle Certification” or the “GIAC Secure Internet Presence”.

One of the posters from [H] had this in his signature.

CCNA, CCNP, CCIE, CCAI, MCT, MCSE, CNE, CNI, A+, Net+, Security+, SSCP

Showing that it is very possible to obtain a grip of certifications

These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Google
  • del.icio.us
  • Digg
  • e-mail
  • Spurl
  • Facebook

2 Responses to “Certification Time”

  1. Stephen Northcutt Says:
    August 6th, 2007 at 1:55 am

    The Global Information Assurance Certification (GIAC) is actually a separate corporation from SANS though they obviously try to stay in alignment. The web page is http://www.giac.org

  2. Peter Manis Says:
    August 6th, 2007 at 3:18 am

    Stephen,

    Thank you for clarifying, I missed the “SANS Institute founded the certification entity” on the wikipedia page.



Leave a Reply