Re: To go to University - For the CISSP etc. - Good idea/Bad idea???

[Brad Barkett <br0dely () gmail com>]

It depends on where you are, and what the job market is like where you live.

In some places (DC, SJ/SF area during the tech boom) people were
scooping up a bunch of janitors and tossing them in front of IDS
consoles, in other places and at other points in time (recessions,
etc) competition is stiff enough that you need to have a masters
degree.

The one thing that is going to make the most difference in your
success is your ability to network and build your reputation, because
ultimately people want to hire someone they are at least vaguely
familiar with or connected to instead of complete strangers. In
choosing between two equally qualified candidates, the one who is
somehow linked to the hiring authority will get the job nearly every
time.

IMO computer security does not require advanced technical degrees. It
requires the mind of a tinkerer, somewhat of a contrarian. I did a BA
in music and a couple of years in a MSCS program, and I have probably
used more of my musical/contrarian creative mind in my work than I
have the algorithm analysis stuff I did in CS.

CISSPs are mainly for getting past HR people who have no clue what
traits really comprise a good security candidate. And of course,
CISSPs are good for networking with other CISSPs whenever you can use
your CISSP CPE maintenance as an excuse for your employer to pay for
you to go to conferences.

If you are going to go to school, my advice would be to go to school
for WHATEVER THING you LIKE enough such that you are going to want to
not only do all your homework, but also immerse yourself in related
activities after hours. It's not that hard to get in on the entry
level in security and work your way into a role, especially if you are
willing to relocate. It's a lot harder to score 4 years of immersion
in a passion with like minded people.

Don't ever waste the college experience on something "practical" when
you could be using it to enrich yourself as a human being, and to
immerse yourself in a crucible of likeminded people who are also very
excited about a topic of interest you love.

That's just my viewpoint, looking back...as someone who is worried
about future stability, I can understand why you might not get it. At
21, I thought getting into Information Systems and CS programs were
the key to my job problem, really it's about networking, getting small
breaks, autodidactic reading habits, and location. Heck, maybe you
could even double major. Infosec/CS, and pottery or something.

Brad Barkett

On Thu, Aug 6, 2009 at 4:26 AM, Hy Zaret <hyzaret () gmail com> wrote:
> Greetings & Salutations to all!
>
> I've been training myself for a while, and have recently came to the
> conclusion that University would be my best choice.
>
> The main reasons I made this decision are;
> • Social reasons
> • Educational advantages
> • Takes years off the experience needed to take the CISSP
>
> I'm writing on these mailing-lists for two reasons;
> • To find out what you think of my choice (not locked in yet!!!)
> • For advice on which course to go for (Sydney, NSW, Australia)
>
> I am wishing sometime in the future to begin a career in IT Security.
>
> Although being under 18, I have still found time to achieve various
> certifications; including CompTIA's Security+, three Cisco
> certifications & a Microsoft accreditation.
>
> Also, for the last 4 months I've been working full-time on the 1st
> Level of an IT Helpdesk.
>
> Am very open to ideas, so would be interested in reading & answering
> your replies!
>
> Thank you for reading this,
>
> Hy Zaret
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
> and CEPT certs require a full practical examination in order to become certified.
>
> http://www.iacertification.org
> ------------------------------------------------------------------------



--
--
Bradley A. Barkett

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------