CIW certs for security, worthless?

ArabianKnight

Why is it that WGU has so many CIW certs for the security degree? I don't know of anyone looking for those certs and they are not very popular with the job search sites. I think they should be replaced with any of the more relevant security certs out there. Correct me if I'm wrong but I don't know much about them and there ability to give you the knowledge to protect IT systems, especially if you don't work with web browsers.

I think GSEC, CEH, or some firewall certs would be a better alternative.

Search "ciw" on dice and get about 7 jobs for webmaster and related?

earweed

WGU has those certs for all degrees except for Network Design and Administration and Network Design and Management. They are merely to show a basic competency in the areas they deal with. the site designer and database are good to have as you will encounter a little of each on your way up to actually working in security.
Don't think that just with a degree that says security that you will automatically be put in charge of securing a network, you'll still have to work your way into it.
True WGU could be having you get a "real" DB cert and taking a class which gave you a Java cert (Java is a class you take now without a cert component) but you need to get a view of everything in the WHOLE of the network before you can know how to protect it. Web sites exist and they can be vulnerable so people in security need to be familiar with how they are designed thus the site design class.
Make these certs useful by doing more than just studying for the test and actually learn something.

ArabianKnight

earweed wrote: »

WGU has those certs for all degrees except for Network Design and Administration and Network Design and Management. They are merely to show a basic competency in the areas they deal with. the site designer and database are good to have as you will encounter a little of each on your way up to actually working in security.
Don't think that just with a degree that says security that you will automatically be put in charge of securing a network, you'll still have to work your way into it.
True WGU could be having you get a "real" DB cert and taking a class which gave you a Java cert (Java is a class you take now without a cert component) but you need to get a view of everything in the WHOLE of the network before you can know how to protect it. Web sites exist and they can be vulnerable so people in security need to be familiar with how they are designed thus the site design class.
Make these certs useful by doing more than just studying for the test and actually learn something.

I agree with you 100%, I just think all that foundational knowledge should be a college course and not a certification.

You can still learn CIW stuff but just without the certs, I would not put down CIW on my resume for a Incident Handler job, but I would put CEH or GSEC.

You can learn Java without getting a cert in it also, I'm all for programming!

I think WGU will prepare student better in this economy if they did this.

I know Incident Handling is not entry level but it would look way better on your resume with those certs.........my 2 cents

earweed

I don't list my CIW certs but I still learned something because I treated the vlasses as classes and not just a cert test. WGU is not there just to get you to take cert tests but to prepare you to enter your field. Getting those certs you mention with no lower level knowledge would be pointless. Your degree will be accreditted for a reason, because WGU provided you with the basis for getting educated. How you treat these cert classes is up to you.

SephStorm

I have to agree with AK on this, while the knowledge is useful, the certs, in this type of degree is less than desirable.

I think a course on web design with a practical assessment, then some secure coding classes would be more appropriate.

I think for instance at least one recognized security cert (SSCP/GSEC) would be highly beneficial to the track. They have the CCNA Security on there, but there was another thread on here that states it's not really desired in the market. I think maybe it was better when they had ASA specialist, FW Specialist, ect.

veritas_libertas

CIW Security seems like it would be fun to do, but you would need to understand that it's not popular. I have seen several university professors that have the certification. I have no idea why. The GSEC would be a better option all around.

earweed

I don't actually think the emphasis here should be on what Security certs you obtain but how many actual security classes you take...the number is 2. To define a Major by 2 classes is not really a good idea. Throwing in more Security classes would necessitate taking something out elsewhere.
Where would they take classes out? The gen eds are required for accredidation and the other IT classes are there to give the student a solid IT background. They already somewhat watered down the NDM program by removing DB, Site development, and Java. Should they remove some of these and replace them with another Security class.

SephStorm

truthfully I cant really say because I don't have a good look at the classes themselves. I will offer input however, when I get my formal AAP.