1.04.2012

Where the CISSP Certification Stands Now That 2012 is Here

As 2012 begins, the Certified Information Systems Security Professional (CISSP) certification is still the worldwide standard in information assurance certification, and that is no exaggeration.

No other advanced certification comes close to its level of trust and acceptance. Over 75,000 professional in more than 130 countries have relied on their CISSP credentials for getting and maintaining information assurance and information technology security jobs.

The certification is so meaningful because the test is extensive and difficult to pass, but those who have the required background and properly prepare for the exam before taking it have a high success rate both in passing the test and in using it to advance their careers.

Survey after survey is also finding that those with CISSP certification achieve higher salaries than similarly qualified people without the certification, another sign of its value. In a 2006 salary survey conducted by Certification Magazine, the CISSP certification proved to be the highest paid credential in the IT industry and nothing has changed now in 2012 according to most sources.

Even the United States Department of Defense and the National Security Agency rely on the certification. In fact, the NSA’s Information Systems Security Engineering Professional (ISSEP) program has adopted the CISSP certification as a training baseline.

In existence since the early 1990s, the certification has had time to establish its industry-leading reputation.

To get the CISSP certification, candidates must prove at least five years industry experience in two more information security areas. Those with fewer years of experience may still qualify, however, if they have a degree in a related field.

Even those who work in information security every day may not have the breadth of knowledge to pass the 250-question exam, however.

The test covers ten domains of industry knowledge, including access control, application security, cryptography, compliance and investigations and security architecture and design, among others.

Focusing on critical evaluation as well as practical knowledge, the test can be tricky even for those who have a good understanding of the concepts involved. In many cases, the test requires candidates to choose the best answer from imperfect choices, simulating the real world’s dependence on finding a solution even when a perfect one does not exist.

For this reason, extensive preparation that covers both the ten domains as well as how to handle the testing methodology is crucial to passing the exam.

Since most candidates for the CISSP certification are already IT industry professionals, the flexibility and depth provided by CISSP online training is often preferable to in-person classroom training.

While online CISSP training still requires that a student commit to the program to be successful, it is more flexible for busy professionals. Most programs include video presentations, assignments, quizzes and other planned lessons, and these can be completed in whatever free time a student has available, at his or her own pace.

Classroom programs often move at the pace of the instructor rather than at the pace of busy students.

In addition to scheduling flexibility and the ability for students to set their own pace, online CISSP training offers:
- the utmost convenience since there is no faraway training center to visit
- the ability to easily repeat difficult sections
- lower prices than many in-person programs

While CISSP certification can be difficult to achieve, tens of thousands have achieved it in the two decades it has existed because they properly prepared and knew what to expect from the exam.

1.03.2012

The Current State of the Security+ Certification

The majority of IT professionals do not specialize in a computer security career path, but security is undoubtedly an essential aspect of all computer-related careers today. Every business has some type of computer system, and the increasing presence of Wi-Fi and internet access make external threats to business data and operating systems a part of everyday life. Security+ is a vendor-neutral certification that is applicable to any computer system, from any vendor, on any network platform.

The Computing Technology Industry Association, better known as CompTIA, was originally organized in 1982 under the name Association of Better Computer Dealers, Inc. It is a non-profit organization that provides a variety of examination and certification services to the IT industry. Security+ is one of these certifications.

The association was involved in some controversy in 2011 when certification standards were updated. The Security+ certification, along with several others, had always been valid for the lifetime of the holder. Beginning in 2011, however, CompTIA changed the certification terms to expire every three years with no provision to grandfather in current certification holders. Recertification was required of everyone, every three years, through either a paid CEU system or through retesting with an additional fee.

Computer security changes so rapidly that, from an industry viewpoint, the changes were required to ensure that certified people really were on top of current threats. Certification holders objected strenuously, and a compromise was reached within a month. Existing certification holders were exempted from retesting requirements, but continuing education requirements were made mandatory.

Security+ certification, first established in 2002 and updated in 2011, is an internationally recognized program that indicates proficiency in computer system security, network security, compliance and operational security, access control and identity management, threats and vulnerabilities, cryptography, and application, data, and host security. It is recognized and used by all branches of the US military and by large electronics firms such as Hewlett-Packard, IBM, Motorola, Symantec, Hitachi, and Unisys.

The 90-minute examination is available in multiple languages and consists of 100 questions for a total possible score of 900 points. The exam covers system security, network infrastructure, cryptography, assessments, and audits, and a score of 750 or higher is required to pass. CompTIA Security+ certification is accredited by the International Organization for Standardization and by the American National Standards Institute.

The certification may be used as an elective for both the MCSA and MCSE security specializations from Microsoft, and it is one of four available options for the DoD Directive 8570, IAT Level II certification requirement for military contractors engaged in information assurance activities.

Security+ online training has become perhaps the most popular way to prepare for the exam. Many of these online classes feature a live instructor who has been recorded so that you can watch lessons several times. Practice exams are available from many third-party testing sites. Many of these sites advertise very high success rates and offer money back guarantees. Whenever purchasing a study guide or access to a practice site, candidates should ensure that the site contains updated information and offers preparation for the current version of the CompTIA Security+ exam. The exam and certification requirements were updated in 2011.

Computer security is one of the fastest growing fields in the undisputedly fastest growing industry. IT professionals with strong security skills are an asset to employers, and CompTIA Security+ certification is an undeniable way to indicate proficiency in this subject area.

12.23.2011

The Many Benefits of Microsoft Office Online Training

With its full suite of applications designed to help working professionals accomplish their tasks, Microsoft Office is the leader in office software. Microsoft Word is used to write correspondence, create memos, and more. Data analysis would be all but impossible without Microsoft Excel. Microsoft Access is a handy tool for creating invoices and improving customer service. PowerPoint enables users to create professional presentations quickly and easily. Finally, Microsoft Outlook is an ideal program for managing email communication.

Those who use Microsoft Office are well aware of the basic functions of all these applications. They are also aware, however, that few people get the most out of these applications. Most users have only a basic knowledge of what these programs are capable of, which leads to problems when these same users need to do more than just the basics. Without a full understanding of how Microsoft Word formats documents, for example, it can be impossible to get a letter or essay to conform to the proper style without spending a lot of time reformatting a document or searching for assistance with the help menu. Also, not knowing how to enter Excel formulas properly can cause a spreadsheet to return inaccurate data. The examples could be multiplied, but the key point is that an insufficient knowledge of Microsoft Office’s capabilities can lead workers to waste time and make errors.

For gaining a better awareness of what Microsoft Word, Excel, Access, PowerPoint, and Outlook can do, there is nothing better than Microsoft Office online training. Using an online interface, office workers and other professionals can learn all about these programs and practice their functions, thereby improving workers’ productivity and overall job performance.

Here are just a few of the benefits of Microsoft Office online training:

• Flexibility — Microsoft Office online training is more flexible than traditional in-person training at the office because workers can go online at any time and from any location to learn and to practice. This allows professionals to work on their Microsoft Office skills when it is most convenient for them and at the time when they are most likely to get the most out of their training.

• Productivity — Online Office training sessions can be scheduled outside of normal work hours so that workers do not have to sacrifice some of their on-the-clock time for training. This means that workers do not have to take a break from their tasks and potentially fall behind on their projects. In fact, employers who want to give their employees Microsoft Office training without hindering their ability to complete their work should always consider the online training option first.

• Affordability — Bringing in an expert in Access, PowerPoint, or one of the other Microsoft Office applications from outside the office can be quite costly, especially when many hours of training are required. Online training is often more affordable, and this is particularly true when a worker decides to get training on his or her own. Not every employer reimburses employees for their Microsoft Office training, so those who must pay for it themselves will definitely prefer the more affordable online learning option.

• Individualized Training — Microsoft Office online training is often done on an individualized basis, which makes it easier for each person to customize the training to his or her needs. In-person group training simply cannot meet individual needs as well because every learner must stay on the same page throughout the training.

It is clear that online Microsoft Office training is the best option for those who want to become proficient in the Office software package. Get started with an online training today to improve productivity and much more.

11.02.2011

Small Business IT is Meeting Major Demands

Over the past five years small business IT has been through so many levels of changes. There was a time where outsourced email and a simple internet connection did the trick. The small business were able to afford products like Server and Exchange and so they upgraded to bringing those in house and then hiring an outside small business IT support company to manage those applications. Nowadays, small business IT consists of every capability of enterprise IT and on an affordable level.

My how wonderful cloud computing has been so far for businesses of every size. The most amazing part of virtualization, is that it is still in its infancy. I can't wait to see what comes about over the next several years with it, but no doubt the cloud is where business of any scale is going to be. You pay for what you use and the outsourced management is seamless, secure, capable, fast and extremely user friendly. Small business IT almost looks identical to enterprise IT, and gap closes more each day.

9.07.2011

Computer Forensics Training is Growing, Fast!

I know, computer forensics is nothing new. People have been studying this for years now and taking classes for years as well.

However, what you didn't know is that the new premier computer forensics certification is the EC-Council's CHFI. There really has not been an industry leading computer forensics certification to date. SANS has a forensics analyst certification through their GIAC brand, but that has no real traction in the industry and SANS is getting smoked by the EC-Council right now anyways (because they are so proprietary with their offerings). The CHFI is making its way to the top of the certification must have list because the CEH has spread so quickly. People who now have the CEH are looking for that next thing.

Oh, and a little military birdie told me something else about the new industry leading forensics cert, that birdie mentioned that CHFI may be up for consideration for the DoD8570 directive.

And it definitely should be, its a very worthwhile certification that all pentesters should have. Everyone working in this capacity needs to know the proper way to put together a case against someone or something that has just exploited your organization or gov agency.

So do yourself favor and sign up for the CHFI certification class at Hacker Halted in Miami in late October. You get a free iPad2 and forensics icon Robert Reed is teaching the class. Details here: Hacker Halted Training