So one of the certs I wanted to work on this year was incident handling. SANS was too expensive for our budget this year, so I looked around and decided on this guy. My focus wasn't necessarily about forensics or getting hands-on dirty but more of a general, holistic incident management approach. The outline of this program fit the bill and was within our budget, so I opted for it. I noticed there is a dearth of reviews on this test, probably because it isn't very widely done, so decided I'd throw out my opinions as I worked through the material in case there's some other random, lonely soul out there looking for some advice on this material and test.
I opted for the iLearn (Self-Paced) program at $699. This includes PDF version of the courseware/book, 6 months of virtual lab access, pre-recorded streaming video of the instructor talking in front of a whiteboard, and a voucher for the exam.
The first part of my "review" if you want to call it that regards the streaming video. I've got to be honest, I was not impressed by the material. Bulletpoint highlights that will get my point across:
- It's short. Roughly 4 hours.
- It's a couple of streaming Flash videos only, broken down into specific modules. No downloads; no alternatives to Flash.
- It's just the dude standing in front of a whiteboard. Fade to a few PowerPoints every now and again, but 95% of it is just the dude standing in front of a whiteboard. Audio-only would have sufficed.
- It really doesn't teach you anything. At most it's a very high level overview of the outline of the course without actually going into any of the content in the courseware.
- There are a few interesting anecdotes thrown in, but nothing really useful in studying or your day-to-day what do I use from this at work.
- Honestly, I'd recommend skipping the videos entirely. You'd be much better served just using that 4 hours working on your outline or studying the material. I guess if you can queue it up on your phone and listen to it on your drive in to work that would be an option, but you really won't get anything out of it.
Next up will be my review of the courseware, but that may take a few days/weeks as I work through it.