I agree with Don. The main advantage of the GIAC certification methodology, when it involved a practical, was the fact that it allowed you to prove your "ability" in a given security discipline. With exam-only certifications, you only prove "knowledge."

Additionally, I also think that Cisco certifications are a great investment. When you attempt the CCNA, you're forced to demonstrate your ability through the use of simulators during the exam. You cannot obtain a CCNA without having actual knowledge of how to configure Cisco routers and switches, and the ability to apply that knowledge practically.

Again, a good certification is one that gives you a solid chance to demonstrate both your "ability" and "knowledge" in Information Systems Security.

Alex Arndt
CISSP, GCIA

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/311/31198#31198