Security Certifications Are Causing More Harm Than Good

Re:Security Certifications Are Causing More Harm Than Good by ganoushoreilly on Wednesday April 12, 2017 @02:24PM (#14100355)

This. So much this. Writing and general social skills are the number 1 thing lacking with people I interact with in the industry. The I know more than you attitude is great amongst peers, but with clients, you don't have to prove you're smarter, instead your job is to make them smarter.

Break it down to a 4th grade level, if you can't, you likely don't understand it yourself.

I would agree that in general certs have too much weight, but the reality of it is, as it stands, they're the closest bridge / standardization that the market has built for non-Security ilk.

Also, Security is not IT. That's another thing that needs to change.

As for OSCP, I think it's great and out of all the certs i've taken for various reasons, it's the only one I felt challenged with, in a good way.

[ Parent | on HN ]

Re:Security Certifications Are Causing More Harm Than Good by thwarted on Wednesday April 12, 2017 @07:55PM (#14102859)

Also, Security is not IT. That's another thing that needs to change.

Do you mean that

    Security is not currently IT and it should be

or do you mean

    Security is considered to be IT and it shouldn't be

? The amount of stress that you mean to put on the word "not" doesn't come through very well in this medium.

[ Parent | on HN ]

Re:Security Certifications Are Causing More Harm Than Good by ZeroManArmy on Wednesday April 12, 2017 @08:13PM (#14102917)

I feel like he means it's generalized into the spectrum that falls into IT. Security should be more of specialization, less toolbox?

[ Parent | on HN ]

Re:Security Certifications Are Causing More Harm Than Good by Spooky23 on Wednesday April 12, 2017 @08:12PM (#14102915)

Security should be IT. Otherwise, you get a bunch of bullshit cya reports and policies that aren't achievable by the technology deliver people.

Security should have an advisory role to the corporate governance folks who maintain policy... usually the lawyers.

[ Parent | on HN ]