I think that the whole thread has summarize it very well:

It was a mistake to remove the practical requirement that was a big differenciator.

it was a mistake to make it easier for people to certified because the justifications are NOT for the better of the community but for the better of the financial side and being able to show a larger number of people certified.

It was a mistake to change SANS/GIAC from a non profit organization that was not pressure to make more money all the time to a for profit organization that is driven by revenues and better financial quarters

It was a mistake to drop the practical when this new "yet to be build" system is not even in place and has not proven itself as far as validating the skills of individuals.

It is still a mistake today to continue doing totally unsupervised test on a web interface. It does not hold value.

Doing the right thing means having less money in your pocket at the end. Doing the proper business decision means you cut what needs to be cut when it does not generate enough revenues.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/311/31246#31246