You can't beat SANS training... seriously, high ROI
Doing what you can on your own also helps. It doesn't matter that your job
doesn't involve a dedicated ISO role. Mine didn't either, but now I'm an
ISO for a global company. The way I got here was actually having an IT
Network Admin/Server Admin role in the past.
I firmly believe that you can't become an ISO by just getting into the
industry by reading books.
It is a progressive career... and involves many hours of study, tinkering on
an isolated network...
and above all, support from your manager for your career goals - is highly
important.
Your manager should promote your ability to eventually become more security
focused - if he doesn't, you need a new manager or job.
I set up miniature labs out of equipment from Ebay and that works wonders, I
keep current on technology and world news, and the important part of being
an ISO is remembering the position is more people oriented than technology -
but it helps you to perform your job AND pass the CISSP if you have a
background in IT. There are few "successful" InfoSec people who actually
perform the actual role... and more people who think they are a security
person when they aren't... who were previous truck drivers and such (no
joke).
Make small goals for yourself - and you will make it. It isn't important to
memorize concepts and questions/answers... but more important to know WHY
and HOW to make the best recommendations for companies of all sizes and that
is what the CISSP is all about.
_____
From: batrob52 [mailto:rlee@sonoma-county.org]
Sent: Thursday, March 24, 2005 11:45 AM
To: CISSP-Discuss@yahoogroups.com
Subject: [CISSP-D] I'm a little lost.
This is my 2nd try doing the cissp. I took it in 10/04 and did not pass.
I'm off to logical security's bootcamp in July for a 2nd try.
I have dvd,all-in-1 shon harris book, offical security guide,etc..
I'm just wondering if its worth it?
My current county job is i.t. but mostly email, so no room for
advancement into security. I've got a couple of coworkers who this its
better to do the GIAC cert,more "real-world".UGH..
Yahoo! Groups Sponsor
ADVERTISEMENT
<http://us.ard.yahoo.com/SIG=129jdmer8/M=298184.6191685.7192823.3001176/D=gr
oups/S=1705007140:HM/EXP=1111786825/A=2593423/R=0/SIG=11el9gslf/*http://www.
netflix.com/Default?mqso=60190075> click here
<http://us.adserver.yahoo.com/l?M=298184.6191685.7192823.3001176/D=groups/S=
:HM/A=2593423/rand=900433616>
_____
Yahoo! Groups Links
* To visit your group on the web, go to:
http://groups.yahoo.com/group/CISSP-Discuss/
* To unsubscribe from this group, send an email to:
CISSP-Discuss-unsubscribe@yahoogroups.com
<mailto:CISSP-Discuss-unsubscribe@yahoogroups.com?subject=Unsubscribe>
* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .
