Which Certification track is better? ISACA vs. ISC2 vs. SANS vs...?

Which Certification track is better? ISACA vs. ISC2 vs. SANS vs...?

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Which Certification track is better? ISACA vs. ISC2 vs. SANS vs...? clusterfsck 11-17-2006
Posted by on November 17, 2006, 12:44 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Don't want to start a "my cert is better than yours" war here, but
which is better?

SANS -- It seems that SANS is very well recognized, but I am curious
about how it is you take a 5 day class and are now ready to test into a
cert. it also seems that they are far more granular, I don't know if
this limited scope is what makes the 5 day class do-able, or if it is
simply a way to generate more revenue by offering more classes and more
tests (SANS classes are some of the most expensive I have seen)

ISC2 -- ISC2 offers the CISSP and several others which are rather broad
in scope and seem more focused on the security manager/exec than the
security implementer or architect.

ISACA -- ISACA offers the CISA and CISM, which seem more global in
scope than the SANS certs and a more middle-of-the-road path between
executive and implementer/architect.

I do realize there are others certs out there (compTIA, Cisco security,
etc.) these are just the three that seem to be the big "spend your
money here" players.

just curious what other security professionals think and why.

thanks,

Erik


Posted by Todd H. on November 17, 2006, 3:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
clusterfsck@gmail.com writes:

> Don't want to start a "my cert is better than yours" war here, but
> which is better?
>
> SANS -- It seems that SANS is very well recognized, but I am curious
> about how it is you take a 5 day class and are now ready to test into a
> cert.

The secret is: Not everyone passes. :-)

> it also seems that they are far more granular, I don't know if
> this limited scope is what makes the 5 day class do-able, or if it is
> simply a way to generate more revenue by offering more classes and more
> tests (SANS classes are some of the most expensive I have seen)
>
> ISC2 -- ISC2 offers the CISSP and several others which are rather broad
> in scope and seem more focused on the security manager/exec than the
> security implementer or architect.

I'd disagree. While CISSP is a fairly broad, shallow cert, it is
probbaly the best recognized out there.

> ISACA -- ISACA offers the CISA and CISM, which seem more global in
> scope than the SANS certs and a more middle-of-the-road path between
> executive and implementer/architect.

This one isn't on my radar, fwiw.

EC-Council also has their Certified Ethical Hacker certs, and the
training and certification are challenging bootcamp style things.
Less than half of a recent class was able to pass the first attempt at
the test. Infosec Institute does a nice job with training on these.
I might add this to your list, though I don't think they are as well
known as SANS or CISSP.

Best Regards,
--
Todd H.
http://www.toddh.net/

Posted by Wayne on November 30, 2006, 9:17 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
The simple answer is none are better than the other. Each of the ones
you talk about have their specific positives and negatives and fit
different people for different reasons. Personally I hold both the
CISSP and CISM and intend to go for the ISSMP concentration of the
CISSP. I took a lot of SANS courses before getting the certs but never
followed through with the SANS certs. SANS is more technical and area
specific. I found the CISSP to be more technical than the CISM. The
two sponsoring organizations are very different. The CISM required
much more proof of experience than the CISSP and the exam was quite a
bit different. I also have the Certified Hacking Forensic Investigator
from EC-Council but was very unimpressed with the course. The material
had a lot of errors and since I had background in forensics was overall
a waste of money, glad I did not pay for it but my company did.

Wayne


Similar ThreadsPosted
10% Discount on SANS Security course October 18, 2007, 1:51 am
track IP to owner August 6, 2005, 8:16 am
Re: how does a website track your usage September 19, 2008, 11:54 pm
Track any cellphone with this GPS tracking site July 31, 2007, 6:24 pm
ACM CCS Industry and Government Track -- Call for Proposals June 24, 2005, 8:04 am
technologies available to track stolen or lost laptops June 19, 2008, 9:23 am
Call for Papers: June 26 - 29 - Special Track on Wireless Technologies and Digital Cities - SAM'06 December 29, 2005, 1:22 pm
certification August 18, 2005, 7:18 am
Re: FBI goons adopting techniques of online criminals to track... criminals? July 20, 2007, 2:09 am
CISSP Certification March 19, 2005, 4:15 am

The site map in XML format XML site map

Contact Us | Privacy Policy