|
What does being able to write code have to
do with physically securing a data center? What does being able to write code
have to do planning for disaster recovery? There is more to IT security
than exploits and viruses. Business (both big and small) need professionals
to interface with the different divisions within an organization. I don’t
know a lot of security professionals that can explain the mechanism used by a
virus to circumvent AV software detection. I also don’t know a lot
of coders who can explain to the legal department the SOX standards for email
and IM retention. Most of my “security professional” peers
operate at the mid-to-upper management level and must provide a secured environment
to many sites throughout the country. Although some of my peers were
originally coders, only a fraction of their time now involves coding, if at
all. “Security professionals” fill
a lot of different roles for a lot of different organizations. Just like
there are generalists when it comes to the medical profession, there are
generalist in the security profession who use automated tools. If the
security professional detects strange code during his/her automated scan, they
would then consult with a security professional with a strong coding background
to fix any problem that might be occurring. Just as a general practitioner
consults with an oncologist if he thinks that his patient has cancer. As the previous poster stated, the
business must hire the right person for the job. If the business has an
in-house “security professional”, the business must make sure that
the person has enough integrity to “know when he/she does not know enough”,
and that he/she will consult with specialized security personnel as needed. From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of 6ackpace Certification have their place in the industry.it
is a base line to judge a person and his technical knowledge. yes i agree to you all about the fact that people with little knowledge
or no knowledge doing this certifications.Also they this certificates require
some prerequisites to write. bottom line:it's up to the
industry to select right person for right jobs. thank you 6ackpace
On 12/6/05, Gautam
R. Singh <[EMAIL PROTECTED]>
wrote: "do we need to code our own OS to be an OS/System
administrator" :-P I think well u usually dont, but u should know the "inner
workings" of it :) But it always good if u code On 12/5/05, sk
<[EMAIL PROTECTED]
> wrote: CISSP is bullshit. as eeye said 99% of the security consultants do
their
This e-mail is property of Oxygen Media, LLC. It is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential, or otherwise protected from disclosure. Distribution or copying of this e-mail or the information contained herein by anyone other than the intended recipient is prohibited. If you have received this e-mail in error, please immediately notify us by sending an e-mail to [EMAIL PROTECTED] and destroy all electronic and paper copies of this e-mail. |
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
