Course advice

[jamesb]

I started in my new role a couple of weeks ago and I've been asked to look into an appropriate course to do. Ideally I'd like to go with Firebrand, because I've had good experiences with them, but am happy to consider others if they don't offer the right course.

 

I need to find a relevant course within budget (about 2.5k), and this is where I'm struggling. Something like CISSP or CEH would be useful (though CEH is one I'd have trouble arguing for at the moment), but don't fit in the budget.

 

My new role is as an information security analyst, with a focus on the networking and architecture side. I've found a few courses which would be a good fit, and are close to budget, but I'd appreciate any suggestions people have:

- EC-Council Network Security Administrator

- (ISC)^2 SSCP?

- (ISC)^2 CISSP?

 

Someone did suggest Sec+, but I've already got that one covered off. Hopefully someone can help me find a good one to take to my manager.

 

Thanks in advance.

[Kitkatninja]

Sorry mate, you haven't listed what your new role it in this thread. Did do a search for your post, but gave up after a few.

 

Can't give advice without a little more information and I guess the same goes for others

[jamesb]

I did mention that it was as an information security analyst, but that is a bit generic.

 

Specifically I'm meant to be focusing on the network and infrastructure side of security rather than applications. There is some crossover with the rest of the team, but for the time being better to have that focus than not - since it's rather early to be offered a course I'd like to go with something that'll be especially useful to my new employer, and broaden out later.

[Kitkatninja]

I did mention that it was as an information security analyst, but that is a bit generic.

 

D'oh, could not see the wood through the trees... Sorry mate

[Kitkatninja]

I was thinking, only because I've seen it on a few information security analyst type roles and on people's LinkedIn profiles who work in the field:

 

CCNA Security Certification "With a CCNA Security certification, a network professional demonstrates the skills required to develop a security infrastructure, recognize threats and vulnerabilities to networks, and mitigate security threats." See here, a few people at another forum has used them in the past (I have not, so recommendation is 2nd hand)

 

The EXIN track based on ISO/IEC 27002. Foundation, Advanced and Expert . The foundation cert can be self-studied, the high level ones are class based.

 

ISEB Information Security Management Principles. This can be self-studied or class based.

 

Both the SSCP and the CISSP are well regarded, however poss at this stage (or in 12 months time), you'd be looking more at the SSCP (as for the SSCP you will need at least 1 years full time experience of working in one or more of the seven domains of the SSCP CBK®. While for the CISSP, you'll need at least 5 years of working in two of the ten domains).

 

Hope that this helps

 

-Ken

[jamesb]

Thanks, they do help (and have been added to my list, but are sadly beyond this year's budget).

 

There is a particular one I'm now looking at, accounts of which are fairly good (if horrific). Has anyone done the OSCP course? Is it potentially too ambitious? I have got a reasonable amount of experience, but from all accounts this is pretty much the deep end.

[Kitkatninja]

Don't know much about the OSCP, but it looks like if you want to enrol for the OSCP certification exam, you must first complete the Penetration Testing with Kali Linux course. Not sure on prices or how recognised/valued these certs are in the UK...

 

What does your manager/co-workers say?

[jamesb]

Looks like the OSCP is going to go ahead.

 

Also possibly a CISSP to follow it, just because.

 

Now admittedly I've only been with these guys a few weeks, but I'm rather impressed so far.

 

On the OSCP course, it's actually the cheapest I've seen anything in that vein for a long time - $800 for exam and 30-days access to materials, rising to $1150 for 90 days, with extra blocks being purchasable. Extra exam attempts at $60.

 

The Pen Testing with Kali course is included in that, along with all the labs (apparently the course is about 90% labs).

 

My only worry with it is that every description I've found has emphasized how tough the course, let alone the exam, actually is. But still - worth a shot.

Edited October 16, 2014 by jamesb