Re: Network Security Certification

["Marcus J. Ranum" <mjr () nfr net>]

> I know the ISSA offers some sort of IS security certification, but I have
> a vague recollection that it's pretty mainframe oriented.  I haven't paid
> much attention to the cert ads I've gotten because I don't take them very
> seriously as proof of expertise -- but it's got to be easier than most
> of my day-to-day work around here, so that's a good thing.  Anyone out
> there aware of any certification programs in TCP/IP networking and security?

Unfortunately, whenever humans are uncomfortable
about and area of knowledge, they tend to exhibit
flocking behavior. The basis is that "if I'm going to be
incompetent, I want to be incompetent in good company."
My belief is that this actually serves to slow down the
accumulation of knowledge by producing complacency.

An article I wrote for CSI on this topic is:
http://www.nfr.net/forum/publications/audit.html

> I'd be delighted to find out that any recommended programs were actually
> going to help me in my job, but that's not a definite requirement.

ISSA is probably the best known one, then. It has a
pretty solid background and I'm sure they are working
to keep it up to date. So it's probably not all about SNA
and RACF anymore. :)

If you'd like, the church of St Dogbert Computer Security
will have a special ceremony for you, and drive out
the demons of stupidity, making you a genuine security
certified mammamuchi. Hmmmm... I wonder if I could
make money selling little tin badges. :)

mjr.
-----
Marcus J. Ranum, CEO, Network Flight Recorder, Inc.
<A HREF=http://www.clark.net/pub/mjr>Personal</A>
<A HREF=http://www.nfr.net>Work</A>
<A HREF=http://www.clark.net/pub/mjr/websec>New Book!!</A>