Security certification choices

By Amy Schurr
Network World Careers Newsletter, 06/26/02

Numerous studies point to security as being a hot technology. If you're interested in honing or validating your security skills, there are several different certifications to take advantage of.

To help you zero in on a program, here's a quick overview of some of the options to consider. Check out the various links to find a certification that best meets your needs.

*Cisco Certified Internetwork Expert (CCIE) Security and Cisco Security Specialist 1

Cisco added a security component to its highest certification, the CCIE, which covers IP, IP routing, and specific security components. Meanwhile, the Cisco Security Specialist 1 requires a Cisco Certified Network Associate designation and proficiency with Cisco's firewalls, intrusion detection systems and VPNs. For more information on CCIE Security, go to www.cisco.com/warp/public/625/ccie/certifications/security.html

For the specialist designation, check out www.cisco.com/warp/public/10/wwtraining/certprog/cqs/security/

*(ISC)2 Certified Information Systems Security Professional (CISSP) and Systems Security Certified Practitioner (SSCP)

(ISC)2's rigorous vendor-neutral program is known as a mark of excellence in the industry. The CISSP is targeted at executives, while the SSCP is appropriate for security specialists in the field. Check out the complete details at www.isc2.org/

*Information Systems Audit and Control Association (ISAC) Certified Information Systems Auditor (CISA)

This certification is designed for IS audit, control and security professionals. It generally requires a minimum of five years of professional experience. Go to www.isaca.org/cert1.htm for the scoop.

*ProSoft Training's Certified Internet Webmaster (CIW) Security Analyst

This program recognizes those who can implement security policy, identify security threats, and develop countermeasures using firewalls and attack-recognition technologies. In order to qualify, you must hold one of several certifications from Cisco, Microsoft or Novell and pass the CIW Security Professional exam. For more details, go to www.ciwcertified.com/

*SANS Global Information Assurance Certification (GIAC) program

Widely respected in the field, GIAC offers nine security certifications that range from entry-level skills to advanced technical specialties such as intrusion detection and forensISC. For more information, go to www.giac.org/program.php

*The Security Certified Program (SCP)

This includes two levels of certifications, the Security Certified Network Professional (SCNP) and Security Certified Network Architect (SCNA). The focus of SCNP is on defense, using technologies such as firewalls, intrusion detection and VPNs. SCNA looks at trusted communication and emerging security technologies like public-key infrastructure, biometrISC, and smart cards. For more information, go to www.securitycertified.net/