PCIP Certification

praving5

Hi Guys,


Looking for feedback on PCIP certification. What do you feel about it? Is it worth it?

https://www.pcisecuritystandards.org/training/pcip_training.php

https://www.pcisecuritystandards.org/site/pcip/index.html

Thanks and regards,
Pravin Goyal

chanakyajupudi

Looks pretty expensive. Depends if you really need it. What kind of role do you have ?

praving5

Yes, its expensive. I was planning to take just exam. My organization is a 'Participating Organization'. So, it would cost me around $395 (application fee) + $395 (Exam Fee) = Total $790.

My role is implementing regulatory and benchmark compliance rules in a product. I work extensively or various regulatory standards such as PCI, SOX, GLBA, HIPAA and various benchmarks such as CIS, DISA, Microsoft.

I currently hold below certifications:
RHCE | HP-UX CSA | VCP | MBA | CISSP | GISP | CCSK | CloudU | CompTIA CE | ITIL-F | ITSM-F

Though I was planning for below certifications next year, I just came across PCIP:

1) CompTIA Cloud+ - CompTIA Cloud+ Certification
2) CompTIA Mobile App Security+ - CompTIA Mobile App Security+
3) CompTIA Mobility+ - CompTIA Mobility+ Certification
4) Social Media Security Professional - Social Media Security Professional certification powered by CompTIA

I also work on various other security projects. So, what do you suggest.

Thanks and regards,
Pravin Goyal

paul78

You said the magic acronym - PCI. If you work with card data in any way, then I would say - yes - the knowledge gained from preparing for the certification would be well worth it. It largely depends on your definition of "worth". The only thing that I wonder is if it makes more sense to wait for PCI DSS 3 materials so its more relevant for the new changes. There has been discussions on PCIP in the past when it was first rolled out. If you do take it, a review of your preparation techniques would be great if you can share.

Zorodzai

In my line of work (electronic funds technologies) it would be really good to have just because of the magic acronym (PCI) but the cost is just way too high. For me, best I can do is make my manager aware of it and hope company sponsors me if i decide to study for it.

GoodBishop

praving5 wrote: »

Hi Guys,


Looking for feedback on PCIP certification. What do you feel about it? Is it worth it?

https://www.pcisecuritystandards.org/training/pcip_training.php

https://www.pcisecuritystandards.org/site/pcip/index.html

Thanks and regards,
Pravin Goyal

I've got it - grandfathered in because I'm a ISA. I would say if you can get your employer to pay for it, then go ahead - because it stays with you, unlike a QSA or a ISA. If you are doing it on your own, I would hold off, unless your full time skillset would be involvement with PCI.

Having PCI knowledge and skills will always carry some weight - it's a big and relavant skillset.

GoodBishop

Speaking of PCI 3.0, the PCI council released guidance on the draft changes from 2.0 to 3.0 - https://www.pcisecuritystandards.org/security_standards/documents.php

It wouldn't hurt to wait for 3.0, but then again, at the core of what PCI is, it should be very similar between 2.0 and 3.0.

praving5

Thanks all for sharing their valuable feedback.

Most probably,

1) My employer would cover it up
2) It makes sense to hold off until PCI DSS 3.0 comes out (just a matter of around 10 weeks)
3) It makes sense to go for it since it would always add to weightage

Additionally, I also think, we should wait 3-6 months to let certification mature the advantages being that some form of a study guide along with sample questions and mock exams would be available. What do you guys think?

Thanks once again. Keep the thread alive!

Thanks and regards,
Pravin Goyal

paul78

I personally would wait until there is a new version of the training materials and exam. But that's just my own preference. I fund all my own training so I tend to be err on trying to get updated value for my dollar. Although I have no idea is PCI plans to update their materials anytime soon since its a relatively new certification.