Why Would I Need to Hire a Security Professional?
The FBI has estimated that industrial espionage by foreign spies costs US companies $200 billion per year. Companies also face theft from current and former employees, trading partners, and the potential threat from terrorist cyber-attackers. The Gartner Group estimates that fully 70% of all thefts that cause loss to businesses are from insiders.
How To Judge A Candidate
The most important qualification for any security professional to have is experience. Five or more years of experience directly related to security is enough to have seen the trends, understand the mind-set of hackers, and see the common uses and mis-uses of networks.
With the high demand for network security professionals, and the drought of experienced candidates, businesses have been willing to settle for less experienced candidates. A number of organizations have assembled training courses and certification exams to help bring novices to a reasonable level of security understanding.
Certifications
There are a number of certifications offered for security professionals. No one standard has been generally accepted throughout the community, and it will be a while before one emerges at the top of the heap. The top contenders are:
* CISSP. This exam is considered to be the most difficult, and most comprehensive security exam.
* Security+. This exam was developed jointly between government, educational and business. It tests many important aspects of the security professional's knowledge.
* TICSA. Offered by TruSecure, a security services vendor, this exam is being heavily promoted. Check for discounts on exam fees.
* SANS GIAC Certification. The Global Incident Analysis Center offers a baker's dozen certifications in the security arena. These certifications are, for the most part, vendor neutral. However, they do offer Unix and Windows specific certifications.
There are a number of vendor-specific exams. These include some for Cisco and Microsoft. In general these exams only show competence in implementing and using vendor-specific hardware and network architectures, and are not broad enough for most business security needs.
Above all, ensure that any security professional you are looking to retain has substantial experience and good references. Look at what they've done for other companies similar to yours, how many years of experience they have and get references.
Return to Index
Read more:
Advertising Your Home Business on a BudgetWhen you are starting out in a new home business and no one knows who you are, one of the greatest challenges you will face is how to drum up new business.If there were not people in your community...
eBay Online Auction Sniping SecretsSince their introduction several years ago, online auctions, such as eBay, have been one of the hottest destinations on the World Wide Web. Auction sellers are attracted by the prospect of a broad ...
Functions and Subroutines in ASPFunctions and Subroutines in ASPIf you read our Tutorial on Include Files (SSI) then you learned how to encapsulate ASP code within include files and the benefits it brings us.As developers, we sho...
How NOT to be Ripped Off by Online HypeWhen you are surfing online, you visited a number of websites. Some website copies are so attractive and you are nearly ready to pull your wallet out, give them your credit card number. But before ...