With rapidly evolving technology, certifications are sometimes necessary to prove credentials as well as very helpful for advancement within the information securities field. The two main certifications within the information securities field are Certified Information Systems Security Professional (CISSP) and GIAC Security Essential Certification (GSEC). Neither certifications programs are entry-level.
The Certified Information Systems Security Professional (CISSP)
This certification is the oldest and most prominent of the certifications. Training programs tend to last around 5 days or more and, typically, requires additional study before the certification exam, which lasts around six hours. Applicants must have at least 5 years of full-time information security experience. One year experience can be waived in lieu of possessing a college-level degree. The CISSP is more the more theoretical of the two exams and focuses more on the managerial aspects of the career. A fee is assessed annually, and the certification lasts for three years and can be renewed by retaking the exam or by submitting proof of continuing professional education credits.
The GIAC Security Essential Certification (GSEC)
Is the newer of the two certifications, denotes that the owner has the knowledge of the basics of information security. It is more technical than the CISSP certification and focuses on more hands-on, real-world applications. Therefore, the GSEC is updated and changes more frequently than the CISSP certification, which remains fairly consistent. Training for the GSEC is also around five days in length. GSEC does not have experience requirements, yet those who try and take the exam without the proper knowledge and preparation will have a very difficult test-taking experience. The test lasts five hours, and certification must be renewed every four years. Similar to the CISSP, renewals can be accomplished through retaking the exam or by submitting proof of continuing professional education credits. In addition, the GIAC has many other certifications that are more specialized according to the various aspects of the information security field, such as mobile device security and firewall analyst among others. Completion of these certifications may help to focus a career path and may be necessary for advancement within some companies.
