Does it hold any weight?

[skadog]

How does Security+ SY0-201, compare with the other available entry level security certifications? My goal this year is to get this before December and the 3 year roll off CompTIA is doing with this and other certifications. I'm also interested in CEH and CPTS.

[djanthony]

Skadog,

I cannot speak to the desire of the cert from the perspective of job postings. I did not see it when I was looking for employment during the summer. I saw many postings on job boards and requirements from recruiters leaning towards the CISSP. However, based on things happening within the US federal job market, I would say it carries weight. Recently, federal agencies have started stressing the information assurance workforce. Within the Department of Defense there is DoD 8570M Information Assurance. It lists the Security+ as an IAT/IAM Tier III level certification. Tier III is the highest of the three levels.

Hope this helps.

D. J. Anthony

[cdupuis]

Good day,

The Security+ certification is a great certification for a starter. It is very well recognized and accepted in the industry.

I would recommend it for sure. Please do listen to my tutorial that I have just posted on the main page. It covers WHY you should do the Security+

The Security+ is on the list of approved certifications from the Department of Defense related to the 8570 directive. It covers the technical side at level two (IAT 2) and it covers the management side at level 1 (IAM level 1).

It does not cover any of the level 3. The CISSP would cover level 3.

However, Security is a great primer if you wish to complete your CISSP later on. It covers about 40% of what you will study on the CISSP.

Good luck

Clement

[skadog]

Hey thank you both for the replies and excellent points!

Clement, I have been listening to the tutorial and have enjoyed it very much. I have also recommended to some friends who have expressed some interest in Info Sec.

I have decided that I am going to pursue the Sec+ certification, my employer will provide me with a voucher once I have completed their CBT's. A friend of mine who is a security architect at Cisco recommended that after that I pursue SANS GSEC, or GIAC Ethical Hacker.

H. Soga

[cdupuis]

Good day,

Thanks for being a PST ambassador and passing the word to others.

The GSEC is a fantastic class but there might be a bit too much overlap between the Security+ content and the GSEC.

I would recommend you take the Ethical Hacking route and then you can aim for more advanced certifications.

I wish you all the best

Do take care

Clement

[lcurtx]

I have attended the GSEC conference training and it is unbelievable how much information it covers. Eric Cole is an awesome instructor. David Rice is also a very good instructor. Whether you do the online course or attend the live conference you will get MP3s which you can use to review the material a 2nd time+ before attempting the exam. There are 6 large manuals including lab work and the details are outlined on the www.sans.org website as each manual is covered each day in this 6 day course.

On the GSEC, you will be required to know some Linux commands which may be fill-in-the-blank type questions. One manual covers Linux/Unix. This is subject which Security+ does not even touch, so as far as the material GSEC is much deeper and covers a broader range of technical topics. On the exam you may have to show knowledge of each of the security tools. You will get screen shots of the tool and you may have to figure out what the tool is doing, etc...

In the evenings there is a bootcamp where you actually use security tools which were covered during that days topics.

IMO, there is some overlap between the two. But, there are significant differences in the depth of the material covered.

GSEC goes more into depth into TCP/IP packets and understanding how to read packets. You have to read packets on the exam. I don't see where Security+ even touches this.

I am currently studying for the Security+ and plan to complete this before the end of the year. I am using the Darril Gibson book and highly recommend this book. The book is well written.

Also, I'm checking out Clement's Domain 1 training presentation he has provided on this website and he also covers a lot of material in his presentation.

If you can afford to attend GSEC training, I highly recommend it. The training is expensive but is very good material in the training. However, renewal of certification is not too bad at around $399 at last check. In addition to getting the exam for renewal you will get a new set of conference books and MP3s. At last check for renewal requirements those have changed also. You can opt out of re-taking the proctored exam by writing a research paper or obtaining a 2nd SANS certification. Renewals are every 4 years.

As far as cost, Security+ is a good option since the initial cost of obtaining the certification can be minimal. You are talking hundreds of dollars versus a SANS certification where you are talking thousands of dollars.

Of course refer to www.sans.org for current details of training and certification since the details and requirements may have changed or been updated. At this website you can also find information about their Masters degree in Information Assurance, etc....

Good luck in whatever path you choose.