Penetration Testing mailing list archives

Re: To go to University - For the CISSP etc. - Good idea/Bad idea???


From: Derek Fountain <derekfountain () yahoo co uk>
Date: Fri, 07 Aug 2009 12:19:15 +0100

Ahmad Taha Zaki wrote:
Hy,
IMHO it is the best choice that you can make, I encourage you to study computer science as it will make you understand things better than you do now as I found through my personal experience, I've been graduated with a major in accounting in 1998 then I achieved CCNA, MCSE, MCSA, MCDBA, CISSP and passed CISM exam, then I wanted to know more about how processor process the command we give it through software so I studied a post graduate Computer Science diploma in which I knew more about microcode and opcode, heap, buffer and buffer overflow, which helped me achieving the OSCP and the GCIH and currently I'm studying a Master of Computer Science for achieving better career. I see that university and academic studies is the key of success in the future.

While I agree that a degree is pretty much an essential step towards a successful IT career these days, I think the above demonstrates how one can go too far in that direction. Collecting qualifications and letters after your name is fine if you want a career in academia, but otherwise at some point you have to stop educating yourself and start actually doing something productive. Something that clients will pay for.

I would suggest the OP, under the age of 18 remember, goes for a general computer science degree, thereby keeping his future options open (as discussed by others in the thread). Then find a suitable grad-training job for a couple of years.

It'll likely be 2015 by then, and the IT world will have changed, so who knows if he'll still like the idea of IT security? If he does, look at the courses and qualifications clients are asking for then.


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------


Current thread: