docrice wrote: » I don't know much about the GISF or know anyone who has gone through SEC301. Based on the course description, it seems very elementary and hardly technical to me. There's a free GSEC assessment you can register for at:https://portal.sans.org/assessments/ to get a feel for it (you'll need to create a SANS portal account). I've been slowly studying for the CISSP over the last year or two and can compare that experience vs. SEC401 / GSEC. Both of them cover a broad range and I feel are complementary, although the GSEC focuses more on the technical aspects and emphasizes Windows / Unix security concepts. It's not so technical that it gets really in-depth at a specialist level, but it's certainly a lot of information if you're relatively non-technical. My (somewhat-unqualified) suggestion is skip SEC301, save your money, and read through a Security+ book. After you pass Security+, then spend your hard-earned cash for the GSEC. In some ways, the GSEC is like Sec+ on steroids as it goes a bit deeper on much of the same topics and also adds the Windows / Unix focus during the last two days.
JDMurray wrote: » In the auditing world, the triple-crown of certs is CISSP/CISA/CISM. If you are getting certs to further your career, you need to look at postings for the types of jobs that are your goals and check what certs the hiring managers are asking for. Certs that aren't asked for shouldn't be your immediate priority, unless they are a stepping stone to the certs that you really need (e.g., getting Security+ before CISSP).
