Comments on: Is CompTIA Security+ (Plus) Worth It?

By: IS_Pro

IS_Pro — Thu, 05 Feb 2015 00:14:41 +0000

The primary information security certifications that many (most?) companies include in job posting’s I’ve seen are:
* GIAC’s Security Essential Certification (GSEC) — GIAC does the certification, SANS does the training [SANS / GIAC offer several training and certification options — especially for technical, hands-on management of incidents, forensics, and security technology)
* (ISC)2’s Certified Information System Security Professional (CISSP) — comprehensive and detailed this certification does require work experience; they also offer the SSCP which covers less material and has a lower experience requirement
* ISACA’s Certified Information System Auditor (CISA) — focused on security and other controls from the perspective of an auditor rather than a practioner

There are others out there but these seem to be the most common, especially for general information security positions. Like many fields, there are specialized certifications for forensics and other focuses.

By: William Ruddy

William Ruddy — Wed, 04 Feb 2015 21:37:01 +0000

In reply to Andy. What do you think are the most valuable certifications?

By: Andy

Andy — Wed, 04 Feb 2015 18:08:54 +0000

For personal reward, sure, the Security+ cert is motivation booster. Maybe it will help someone leave a PC tech or Help Desk role, but, overall there is little financial incentive get to the Security+ cert.

I have the Security+ cert, mainly because I won a voucher to take the test for free. In the infosec world, there a few certs that really matter – and Security+ is not one of them. Now, it certainly isn’t going to hurt you to get it. It’s a rather cheap certification and isn’t very difficult to earn.