Comments on: Information Security: Comparing the CISSP and GSEC Certifications http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications Searching for a universal theory of everything... Fri, 22 Aug 2008 03:27:50 +0000 http://wordpress.org/?v=2.7-bleeding By: Tone http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-158871 Tone Thu, 10 Jul 2008 02:52:13 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-158871 <p>Bee said "The Department of Defense and others are nowing training their security officers with the GSEC bootcamps instead of the CISSP." </p> <p>That's funny. Go to usajobs.gov and do a search on CISSP and then go back and do a search on GIAC or GSEC and you will find 1 result and that 1 result for GIAC states that a CISSP is required. By the way, the CISSP search gave me 93 results. </p> <p>'Besides the GSEC must be taken every 4 years where the CISSP is a lifelong certification.' Where are you getting this info from? You have to earn CPE credits after you pass the CISSP to maintain the cert or you have to retake it 3 years later. Unless you consider 3 years a lifetime, please update your resources.</p> <p>I passed Security+ in 15 minutes after studying for the CISSP.</p> Bee said “The Department of Defense and others are nowing training their security officers with the GSEC bootcamps instead of the CISSP.”

That’s funny. Go to usajobs.gov and do a search on CISSP and then go back and do a search on GIAC or GSEC and you will find 1 result and that 1 result for GIAC states that a CISSP is required. By the way, the CISSP search gave me 93 results.

‘Besides the GSEC must be taken every 4 years where the CISSP is a lifelong certification.’ Where are you getting this info from? You have to earn CPE credits after you pass the CISSP to maintain the cert or you have to retake it 3 years later. Unless you consider 3 years a lifetime, please update your resources.

I passed Security+ in 15 minutes after studying for the CISSP.

]]> By: Bee http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-153888 Bee Mon, 23 Jun 2008 05:08:28 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-153888 <p>The Department of Defense and others are nowing training their security officers with the GSEC bootcamps instead of the CISSP. That should be a strong indication that the industry is starting to put the GSEC ahead of the CISSP. Besides the GSEC must be taken every 4 years where the CISSP is a lifelong certification. What I have notices is that many CISSP "professionals" know very little about a lot. Where someone who has the GSEC knows a lot about a lot. Looking at recent jon postings you can ever see things like "CISSP or Security+ required." The CISSP is losing ground to Security+, GSEC, CCNA and others which it should!</p> The Department of Defense and others are nowing training their security officers with the GSEC bootcamps instead of the CISSP. That should be a strong indication that the industry is starting to put the GSEC ahead of the CISSP. Besides the GSEC must be taken every 4 years where the CISSP is a lifelong certification. What I have notices is that many CISSP “professionals” know very little about a lot. Where someone who has the GSEC knows a lot about a lot. Looking at recent jon postings you can ever see things like “CISSP or Security+ required.” The CISSP is losing ground to Security+, GSEC, CCNA and others which it should!

]]> By: DO http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-115538 DO Mon, 21 Jan 2008 20:50:29 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-115538 <p>Infosecwriter, drop the agenda. The simple fact is that (whether or not he has it... who cares) many people have said the same thing... just Google CISSP and GSec. I have been in the industry for more than seven years now... the CISSP exam took me less than 1.5 hours, including double-checking my answers and work. It is a fairly simple exam... I learned nothing in the bootcamp (and made everyone save the teacher angry because I knew all of the answers and he and I kept going into in-depth discussions).</p> <p>The CISSP is a weak exam because it is non-technical and covers many topics, but few things. No depth. What little depth it attempts to provide is generally wrong, though. For example, my exam had a question concerning buffer overflows and how to "prevent" them. The only somewhat correct answer is to check the range and offset, but even that's not right. In all of the domains, excluding BC and DR, the CISSP has very little information, depth, or knowledge.</p> <p>Also, just to weigh in on the CCNA thing (I agree it's completely different), I took the CCNA 1/2/3/4 route through Cisco's Networking Academy, which taught me a wealth of information that I retain today and has helped me through my college studies, work, and my research. CISSP has done nothing for me. In my case, I got the CCNA through a respectable means, rather than simply passing the exam, and I learned the most; I didn't learn anything in the CISSP bootcamp and and no issues with ANY of the CISSP exam questions (save 2 that made no sense... the English was completely messed up).</p> <p>My ultimate point is that certifications should mean nothing to you... it's the knowledge. Anyone can pass an exam (I know CISSPs who couldn't tell you the difference between a router, switch, lvl4 switch, lvl3 switch, hub, repeater, and bridge.... I know CCNAs who couldn't either). I recommend that you take classes, go to University (and apply yourself), and participate in research. Certifications and ceritificates are pointless and don't help you grow... when companies figure this out, we'll see a dramatic shift in work quality and fewer losers in our fields (I do application PT, Web-based application PT, network PT, OS PT, and vulnerability assessments for a living).</p> Infosecwriter, drop the agenda. The simple fact is that (whether or not he has it… who cares) many people have said the same thing… just Google CISSP and GSec. I have been in the industry for more than seven years now… the CISSP exam took me less than 1.5 hours, including double-checking my answers and work. It is a fairly simple exam… I learned nothing in the bootcamp (and made everyone save the teacher angry because I knew all of the answers and he and I kept going into in-depth discussions).

The CISSP is a weak exam because it is non-technical and covers many topics, but few things. No depth. What little depth it attempts to provide is generally wrong, though. For example, my exam had a question concerning buffer overflows and how to “prevent” them. The only somewhat correct answer is to check the range and offset, but even that’s not right. In all of the domains, excluding BC and DR, the CISSP has very little information, depth, or knowledge.

Also, just to weigh in on the CCNA thing (I agree it’s completely different), I took the CCNA 1/2/3/4 route through Cisco’s Networking Academy, which taught me a wealth of information that I retain today and has helped me through my college studies, work, and my research. CISSP has done nothing for me. In my case, I got the CCNA through a respectable means, rather than simply passing the exam, and I learned the most; I didn’t learn anything in the CISSP bootcamp and and no issues with ANY of the CISSP exam questions (save 2 that made no sense… the English was completely messed up).

My ultimate point is that certifications should mean nothing to you… it’s the knowledge. Anyone can pass an exam (I know CISSPs who couldn’t tell you the difference between a router, switch, lvl4 switch, lvl3 switch, hub, repeater, and bridge…. I know CCNAs who couldn’t either). I recommend that you take classes, go to University (and apply yourself), and participate in research. Certifications and ceritificates are pointless and don’t help you grow… when companies figure this out, we’ll see a dramatic shift in work quality and fewer losers in our fields (I do application PT, Web-based application PT, network PT, OS PT, and vulnerability assessments for a living).

]]> By: Network Security Blog » Network Security Podcast, Episode 75 http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-110434 Network Security Blog » Network Security Podcast, Episode 75 Sat, 05 Jan 2008 21:32:45 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-110434 <p>[...] Information Security: Comparing the CISSP and GSEC certifications [...]</p> [...] Information Security: Comparing the CISSP and GSEC certifications [...]

]]> By: JeffBolden.net » Security Certs: Oh How I Love/Loath Thee… http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-80029 JeffBolden.net » Security Certs: Oh How I Love/Loath Thee… Fri, 07 Sep 2007 11:14:33 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-80029 <p>[...] interest (and some amusement) that I was following the recent comments between Daniel Miessler (original post and followup) and Marty McKeay (here and here) in regards to the comparisons/differences between [...]</p> [...] interest (and some amusement) that I was following the recent comments between Daniel Miessler (original post and followup) and Marty McKeay (here and here) in regards to the comparisons/differences between [...]

]]> By: dmiessler.com | More Refined Thoughts on the CISSP http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-79186 dmiessler.com | More Refined Thoughts on the CISSP Mon, 03 Sep 2007 23:56:31 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-79186 <p>[...] have been taking a bit of flak regarding my post comparing the CISSP to the GSEC. It’s been interpreted as negative towards the CISSP, which I suppose is fair to some degree. [...]</p> [...] have been taking a bit of flak regarding my post comparing the CISSP to the GSEC. It’s been interpreted as negative towards the CISSP, which I suppose is fair to some degree. [...]

]]> By: Alex http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-79149 Alex Mon, 03 Sep 2007 19:58:05 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-79149 <p>Dear "Infosecwriter", you can find someone in (ISC)2 registry only if they gave permission for their personal information to be published. That does not mean that Daniel is not a CISSP and I really don't think he is under any obligation to prove his membership to YOU. Your obsession with checking his certifications only shows that you are just not getting it! Experience, skills and ability to perform logical reasoning is much more important that any certification.</p> Dear “Infosecwriter”, you can find someone in (ISC)2 registry only if they gave permission for their personal information to be published. That does not mean that Daniel is not a CISSP and I really don’t think he is under any obligation to prove his membership to YOU. Your obsession with checking his certifications only shows that you are just not getting it! Experience, skills and ability to perform logical reasoning is much more important that any certification.

]]> By: Infosecwriter http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-78818 Infosecwriter Sun, 02 Sep 2007 18:04:41 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-78818 <p>What give me the idea you don't have it? Simple… Miessler is not in (ISC)2's certification database. This tells me you don't have it: https://www.isc2.org/cgi-bin/cert_verification.cgi. If you have a CISSP, you need to fix the issue with (ISC)2. Posting your certification number for others to verify your claims would also be appropriate since you're not in the database.</p> <p>I’ve seen your name on SANS for the GSEC and am awaiting confirmation from ISACA on the CISA.</p> What give me the idea you don’t have it? Simple… Miessler is not in (ISC)2’s certification database. This tells me you don’t have it: https://www.isc2.org/cgi-bin/cert_verification.cgi. If you have a CISSP, you need to fix the issue with (ISC)2. Posting your certification number for others to verify your claims would also be appropriate since you’re not in the database.

I’ve seen your name on SANS for the GSEC and am awaiting confirmation from ISACA on the CISA.

]]> By: sd dietz http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-78648 sd dietz Sat, 01 Sep 2007 22:36:15 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-78648 <p>I always enjoy discussions like this. They show the ad hominem attacks on both sides of the same coin. As a CISSP, CISA, GCFA, G7799 and I have have forgotten more about security than most know. Neither is superior to the other. They both have their strengths and weaknesses. I could describe some of the critical weaknesses of the GIAC program in the same way I could with the ISC2 program. In both instances, descriptions would add no value and also compromise the TOS of both exam processes. The real issue for each and danger for each is how quickly technology changes but the elements of good security remain the same. I still state 90% of good IT Sec is common sense. GSEC focuses on latest technology, but no always on best logical practice. CISSP focuses on best practice and logic but not always the latest technology. If I were wanting to hire a FW engineer, I would want to know whether they can manage the ruleset for the named firewalls be it an outdated Guantlet or the latest rev of Checkpoint or Juniper. But what do I know. I have forgotten it already.</p> <p>Enjoy the world, it will be different a nanosecond from now</p> <p>SD Dietz</p> I always enjoy discussions like this. They show the ad hominem attacks on both sides of the same coin. As a CISSP, CISA, GCFA, G7799 and I have have forgotten more about security than most know. Neither is superior to the other. They both have their strengths and weaknesses. I could describe some of the critical weaknesses of the GIAC program in the same way I could with the ISC2 program. In both instances, descriptions would add no value and also compromise the TOS of both exam processes. The real issue for each and danger for each is how quickly technology changes but the elements of good security remain the same. I still state 90% of good IT Sec is common sense. GSEC focuses on latest technology, but no always on best logical practice. CISSP focuses on best practice and logic but not always the latest technology. If I were wanting to hire a FW engineer, I would want to know whether they can manage the ruleset for the named firewalls be it an outdated Guantlet or the latest rev of Checkpoint or Juniper. But what do I know. I have forgotten it already.

Enjoy the world, it will be different a nanosecond from now

SD Dietz

]]> By: Daniel Miessler http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-78626 Daniel Miessler Sat, 01 Sep 2007 20:13:36 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-78626 <p>What gave you the idea that i dont have a CISSP? I have it, the CISA, the GCIA, and the GSEC as well.</p> What gave you the idea that i dont have a CISSP? I have it, the CISA, the GCIA, and the GSEC as well.

]]> By: Infosecwriter http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-78609 Infosecwriter Sat, 01 Sep 2007 18:42:44 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-78609 <p>For someone that doesn’t have the CISSP, the author claims to know an awful lot about how “easy” it is. I heard the same claim from someone in the Computer Forensics community. The CISSP if far more difficult then the GSEC is. The GSEC is a lower level CERT and not even on the same playing field as shown with the DoD 8570.1 M. The GSEC only qualifies for Technical II while the CISSP qualifies for Technical I, II, III and Management I, II, III. </p> <p>"More than I can a test that has a 70% first-time-pass rate..." Really? Where is your proof? I know for a fact that this is not the case in the sector I work in. There are many security credentials out there, some better then the others. The CISSP does not cover everything, but it covers more then the GSEC.</p> For someone that doesn’t have the CISSP, the author claims to know an awful lot about how “easy” it is. I heard the same claim from someone in the Computer Forensics community. The CISSP if far more difficult then the GSEC is. The GSEC is a lower level CERT and not even on the same playing field as shown with the DoD 8570.1 M. The GSEC only qualifies for Technical II while the CISSP qualifies for Technical I, II, III and Management I, II, III.

“More than I can a test that has a 70% first-time-pass rate…” Really? Where is your proof? I know for a fact that this is not the case in the sector I work in. There are many security credentials out there, some better then the others. The CISSP does not cover everything, but it covers more then the GSEC.

]]> By: Dean http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-78593 Dean Sat, 01 Sep 2007 15:57:59 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-78593 <p>No, No, NO!</p> <p>You missed the point of the CISSP and the GSEC both. If I have a leaky faucet, I hire a plumber. If I have a bad circuit breaker, I hire an electrician. Just because my plumber can screw in a light bulb, doesn't make me want trust him with my electrical problems. Just because my electrician can flush a toilet, doesn't mean I want him to fix a faucet.</p> <p>Just because CISSP & GSEC have the word 'security' in the name of the certification doesn't mean one can replace the other in their job or function. </p> <p>CISSPs are business decision makers about technology. GSECs are technologist that implement.</p> <p>If you can't understand the difference you should not be choosing either. If you can understand the difference, you would never replace one with the other.</p> No, No, NO!

You missed the point of the CISSP and the GSEC both. If I have a leaky faucet, I hire a plumber. If I have a bad circuit breaker, I hire an electrician. Just because my plumber can screw in a light bulb, doesn’t make me want trust him with my electrical problems. Just because my electrician can flush a toilet, doesn’t mean I want him to fix a faucet.

Just because CISSP & GSEC have the word ’security’ in the name of the certification doesn’t mean one can replace the other in their job or function.

CISSPs are business decision makers about technology. GSECs are technologist that implement.

If you can’t understand the difference you should not be choosing either. If you can understand the difference, you would never replace one with the other.

]]> By: elamb http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-78355 elamb Fri, 31 Aug 2007 14:58:14 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-78355 <p>originally posted at http://infosecplace.com:</p> <p>The GSEC sound interesting, but I'd definitely go for CISSP first because more employers are looking for it. </p> <p>@Monster looking for CEH: http://jobsearch.monster.com/Search.aspx?q=CEH&cy=us&brd=1&re=0&jsnonreg=1&pg=1</p> <p>@Monster looking for GSEC (45 pages - many also looking for CISSP) http://jobsearch.monster.com/Search.aspx?q=GSEC&sid=%2D1&cnme=&rad=20&cy=us&brd=1&re=&JSNONREG=1</p> <p>@monster looking for CISSP (1680 pages) http://jobsearch.monster.com/Search.aspx?q=CISSP&cy=us&brd=1&re=0&jsnonreg=1&pg=1</p> <p>@Monster looking for Security+ (5000 pages!!.. but doesn't pay as good) http://jobsearch.monster.com/Search.aspx?q=Security%2B&cy=us&brd=1&re=0&jsnonreg=1&pg=1</p> originally posted at http://infosecplace.com:

The GSEC sound interesting, but I’d definitely go for CISSP first because more employers are looking for it.

@Monster looking for CEH: http://jobsearch.monster.com/Search.aspx?q=CEH&cy=us&brd=1&re=0&jsnonreg=1&pg=1

@Monster looking for GSEC (45 pages - many also looking for CISSP) http://jobsearch.monster.com/Search.aspx?q=GSEC&sid=%2D1&cnme=&rad=20&cy=us&brd=1&re=&JSNONREG=1

@monster looking for CISSP (1680 pages) http://jobsearch.monster.com/Search.aspx?q=CISSP&cy=us&brd=1&re=0&jsnonreg=1&pg=1

@Monster looking for Security+ (5000 pages!!.. but doesn’t pay as good) http://jobsearch.monster.com/Search.aspx?q=Security%2B&cy=us&brd=1&re=0&jsnonreg=1&pg=1

]]> By: rob http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-78354 rob Fri, 31 Aug 2007 14:45:53 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-78354 <p>Saul,</p> <p>I've heard that the CCNA has changed signifigantly since I took it in 2003 (more hands allows you to actually type in commands for a router), but I'm sure the differences between it an the CISSP are the same. Aside from the content, of course, the types of questions on the CCNA are simple knowledged based "Type the Command needed to enter the configuration of the router" sorts of questions. Whereas, the CISSP is comprehensive and require you to choose the "best" answer out of four. </p> <p>From a content perspective there really is no comparison. Cisco does not have an equivalent to the CISSP that I could find. The CISSP covers so much ground at a high "management" level. Until, you get to CCIE, Cisco certs are each pretty specialized to a small area of networking. CCNA is a broad look at the basics of routing (relatively small slice that can gauge subnetting skills & what commands you know while in typical switch or router). CISSP is a broad look at everything in information security (so broad that it says nothing about technical skill). </p> <p>All I know about the GSEC is that its SANS, its expensive and its open book.</p> Saul,

I’ve heard that the CCNA has changed signifigantly since I took it in 2003 (more hands allows you to actually type in commands for a router), but I’m sure the differences between it an the CISSP are the same. Aside from the content, of course, the types of questions on the CCNA are simple knowledged based “Type the Command needed to enter the configuration of the router” sorts of questions. Whereas, the CISSP is comprehensive and require you to choose the “best” answer out of four.

From a content perspective there really is no comparison. Cisco does not have an equivalent to the CISSP that I could find. The CISSP covers so much ground at a high “management” level. Until, you get to CCIE, Cisco certs are each pretty specialized to a small area of networking. CCNA is a broad look at the basics of routing (relatively small slice that can gauge subnetting skills & what commands you know while in typical switch or router). CISSP is a broad look at everything in information security (so broad that it says nothing about technical skill).

All I know about the GSEC is that its SANS, its expensive and its open book.

]]> By: Information Security Awareness & howtos » Which Security Certification Should I Get? http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-78342 Information Security Awareness & howtos » Which Security Certification Should I Get? Fri, 31 Aug 2007 13:19:21 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-78342 <p>[...] do agree with DMiessler and Mckeay: “I’ve met CISSPs who can’t configure a home network — no joke. Again, I [...]</p> [...] do agree with DMiessler and Mckeay: “I’ve met CISSPs who can’t configure a home network — no joke. Again, I [...]

]]> By: Alex http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-78291 Alex Fri, 31 Aug 2007 08:47:16 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-78291 <p>I fully agree that CISSP should not be a measure of hands-on info-security knowledge. I also met CISSPs who can't name services running on port 21, 22, 53, 443, etc. Before testing for CISSP (passed successfully after one (1) day of studying) I already had certifications such as CCSA, CCSE, CCNA, ICE, ... and over 10 years of network security experience. Passing CISM and CISA exams was very easy, as well. BTW, I got my CCNA in 1999 after 4-day training and it wasn't that difficult although I would not compare it with CISSP which is much more complex and requires broader knowledge (CCNA is not a security cert. after all ...). When interviewing potential consultants or employees for info-sec projects or positions, I am being significantly more skeptical towards hiring CISSP or CISA vs. GSEC or other GIAC certs.</p> I fully agree that CISSP should not be a measure of hands-on info-security knowledge. I also met CISSPs who can’t name services running on port 21, 22, 53, 443, etc. Before testing for CISSP (passed successfully after one (1) day of studying) I already had certifications such as CCSA, CCSE, CCNA, ICE, … and over 10 years of network security experience. Passing CISM and CISA exams was very easy, as well. BTW, I got my CCNA in 1999 after 4-day training and it wasn’t that difficult although I would not compare it with CISSP which is much more complex and requires broader knowledge (CCNA is not a security cert. after all …). When interviewing potential consultants or employees for info-sec projects or positions, I am being significantly more skeptical towards hiring CISSP or CISA vs. GSEC or other GIAC certs.

]]> By: An Information Security Place » Blog Archive » Miessler views GSEC cert with more favor than CISSP http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-78214 An Information Security Place » Blog Archive » Miessler views GSEC cert with more favor than CISSP Fri, 31 Aug 2007 01:22:24 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-78214 <p>[...] Miessler has posted a pretty good breakdown of the differences between the GSEC cert and the CISSP cert.  He is [...]</p> [...] Miessler has posted a pretty good breakdown of the differences between the GSEC cert and the CISSP cert.  He is [...]

]]> By: Saul Lethbridge http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-77906 Saul Lethbridge Wed, 29 Aug 2007 17:10:39 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-77906 <p>Anyone else care to compare the difficulty of GSEC/CISSP with a recent CCNA exam?</p> Anyone else care to compare the difficulty of GSEC/CISSP with a recent CCNA exam?

]]> By: Saul Lethbridge http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-77905 Saul Lethbridge Wed, 29 Aug 2007 17:03:25 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-77905 <p>I thought you might come back with that. </p> <p>The difficulty of the CCNA has increase greatly since 2003, wheras before this it was quite easy.</p> <p>Did you get your CCNA recently?</p> I thought you might come back with that.

The difficulty of the CCNA has increase greatly since 2003, wheras before this it was quite easy.

Did you get your CCNA recently?

]]> By: Daniel Miessler http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-77898 Daniel Miessler Wed, 29 Aug 2007 16:28:37 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-77898 <p>CCNA is far easier than either of the two I mentioned. It's a completely entry-level cert that could take a person who's decent with networking less than a week to study for.</p> <p>The CISSP and GSEC need a whole lot more than that unless you go to the courses/bootcamps specifically designed to prepare you.</p> CCNA is far easier than either of the two I mentioned. It’s a completely entry-level cert that could take a person who’s decent with networking less than a week to study for.

The CISSP and GSEC need a whole lot more than that unless you go to the courses/bootcamps specifically designed to prepare you.

]]> By: Saul Lethbridge http://dmiessler.com/blog/information-security-comparing-the-cissp-and-gsec-certifications#comment-77897 Saul Lethbridge Wed, 29 Aug 2007 16:26:13 +0000 http://dmiessler.com/blogarchive/information-security-comparing-the-cissp-and-gsec-certifications#comment-77897 <p>Taking this article and your previous on infosec certs, I'd be interested to see a difficulty comparison with non-security certs such as Cisco's CCNA.</p> <p>This will be very beneficial for those just entering the security field.</p> Taking this article and your previous on infosec certs, I’d be interested to see a difficulty comparison with non-security certs such as Cisco’s CCNA.

This will be very beneficial for those just entering the security field.

]]>