Re: certification of skill

[Tony Howlett <thowlett () netsecuritysvcs com>]

At 12:59 PM 2/12/2002 +0000, you wrote:


> Hi
>
> Which is better: CISSP or SANS qualifications (eg. level-1)

They are two very different things, IMHO.  Its like saying, whats better, A 
drill or a band saw?  Depends on what you want to do.

The SANS certs are ground level, hands on certifications designed around 
teaching you some specific discipline in the security field.  They are much 
better suited to people looking to enter the security field or those 
wishing to polish their skills or focus on a specific area.  They also 
require significant financial investment in the form of the course fees, 
etc (although i believe you can now challenge some of the lower level certs 
just by paying the test fee).

The CISSP cert is much more like the GMAT of the security world.  You are 
proving what you already know.  You arent going to do a whole lot of 
learning, unless you take the review courses which are, as the name 
implies, review, not first time teaching courses.   The CISSP also has a 3 
year security background requirement so unless youve been in a security 
related position for 3 years, you cant even take the test.  The financial 
investment is much lower, being only a $400 test fee, unless of course you 
take the review course which run up into the thousands.

In summary, i would say the sans certs are for the front line security 
gurus, wheras the CISSP is more intended as a graduate cert, intended for 
those already in the field and looking to move into management or do 
outside consulting.   Sans now has an upper level cert also, called their 
CISO (certified Information security officer) which could serve same 
purpose but you have to pass several of the lower level certs to get there 
so i wouldnt even venture a guess at the eventual cost of getting that one.

btw, i have both and find them both useful for different things.  The GIAC 
cert taught me a lot of things that i use day to day and the CISSP cert 
adds credibility to my work.

Good luck!

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards