- 论坛徽章:
- 0
|
Copied from another post here
Articles about CISSP demand analysis \r\nhttp://www.scmagazine.com/scmagazin...07/feature.html\r\nhttp://www.scmagazine.com/scmagazin...07/special.html\r\n\r\n\r\nQuote (from the second article)\r\n\r\nFilter Out \'Certified\' Exaggerators\r\nby Dale Martin \r\nThere is a real scarcity of genuine security professionals, even among the \'certified\' practitioners. Experienced, mature and certified staff are hard to find and the number of \"certification-collectors\" is on the rise.\r\n\r\nJust last week, a security manager at a large bank sacked a \'CISSP\' because he had known of a critical security flaw in a system and had failed to do anything about it. The professional certifications are worthless without experience.\r\n\r\nWhen looking for genuine security professionals, look beyond people with a MCSE, CNE and CISSP [or] SANS - GIAC. Look for people with CISSP and CISA - people with both certifications are the ones who are serious about their profession and have the experience to provide the solutions that business needs.\r\n\r\nYou also need to check that the certifications are real. There are a number of people running around claiming CISSP, CISA, SANS, but who actually do not have the certification; or have done the exam, but do not yet meet the experience requirement to call themselves an infosec professional. Businesses really need to start doing background checks on certification claims and particularly on \'consultants\' and infosec providers. If someone won\'t or can\'t provide the proof of their experience, then look elsewhere for your infosec advice.\r\n\r\nDale Martin is principal consultant of information security with Vectra Corporation in the Asia Pacific region. \r\n\r\nUnquote\r\n\r\nIMHO, US has more job openings for CISSP/Security than Canada for now. Remember, US is about 8 times larger in population than Canada. By and large, security professioanls are in demand, trend is steady although still slow. |
|