Re: [lists] Re: [Full-disclosure] IT security professionals in demandin 2006

["Jason Coombs" <jasonc@xxxxxxxxxxx>]

Commercial pressures are just as harmful to security as are complexity and 
ignorance.

Regards,

Jason Coombs
jasonc@xxxxxxxxxxx

Sent from my BlackBerry wireless handheld.

-----Original Message-----
From: "Curt Purdy" <purdy@xxxxxxxxxx>
Date: Mon, 5 Dec 2005 17:30:38 
To:"'wilder_jeff Wilder'" <wilder_jeff@xxxxxxx>, 
<sk@xxxxxxxxxxxxxxxxxxxxxxx>,<full-disclosure@xxxxxxxxxxxxxxxxx>
Subject: RE: [lists] Re: [Full-disclosure] IT security professionals in demand
        in 2006


Jeff Wilder sent:
> Not to validate the cissp... but try to get a good security 
> job with out it. 

I agree Jeff, for some reason it is considered the gold standard, though not
sure why.  Never took a class, studied a single book for a week and knocked
it out in half the 6-hour time period.  The SANS GIAC certs were much more
technical and absolutely required the classes.

I describe the CISSP as a river a mile wide and 6 inches deep, and the SANS
certs as a hundred yards wide and 30 feet deep.

If you spend more on coffee than on IT security, you will be hacked. 
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke 

Curt Purdy CISSP, GSNA, GSEC, CNE, MCSE+I, CCDA
Information Security Officer

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/