You asked:
Is acheiveing CISSP certification useless if not done while working in
the Information Security domain? For example if somebody is a
networking professional and has experience in network access control
policy deployment but is not a hard core infosec pro after getting
certified wont it be difficult for him to be a infosec pro.
The certification by itself isn't sufficient to make you an "infosec
pro", but I found it to be useful to get there. My background included
bits and pieces of infosec work that had been incidental to other
primary responsibilities, but I had never had infosec as my primary
responsibility. Getting a CISSP helped me in two ways: (1) it gave me
some exposure to, and (by way of studying for the exam) increased my
knowledge of, all of the CISSP knowledge domains, and (2) it
demonstrated my level of commitment to infosec as a profession. I have
since gotten a job where infosec is my primary responsibility -- the job
also draws heavily on previous experience in other areas as well -- and
at this point I would consider myself an infosec pro, although in some
regards a bit of a newbie. CISSP certification was one of the stated job
requirements and got me in the door for an interview. Once there, I had
to demonstrate all of the other skills and qualities that they were
looking for.
--
- Brian Smithson
brian@grot.com
------------------------ Yahoo! Groups Sponsor --------------------~-->
Make a clean sweep of pop-up ads. Yahoo! Companion Toolbar.
Now with Pop-Up Blocker. Get it for free!
http://us.click.yahoo.com/L5YrjA/eSIIAA/yQLSAA/kgFolB/TM
--------------------------------------------------------------------~->
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/CISSP-Discuss/
<*> To unsubscribe from this group, send an email to:
CISSP-Discuss-unsubscribe@yahoogroups.com
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
