Compare cert salaries and plan your next career move
Rookkiiee wrote: » Hello ALL! Here's my dilemma! I have a B.Sc in finance and Information systems. Most of my post college work were more financial (not really technical). I currently work for a hospital as a Financial Operations Analyst. Given the economy and my own future financial security im thinking of doing the following:A - Get some technical training e.g MCSA and CompTia Security+ training and get my hands dirty (but i dnt want ot go into desktop support etc. (no disrespect to anyone)) I'm leaning towards the Security industry as it is hot right now and looks good for the future. As someone who is non-technical should i do the MCSA and Security+ OR go ahead to CSSIP ??? to help become a consultant or IT security analyst type work???B - Stay in my current field, get the PMP or CAPM certification BUT the problem still is - NO TECHNICAL EXPERIENCE. is it valuable to me to get the PMP/CAPM without having the tech experience?? if i do htis, i will look for a PM type work but what r the chances without already having the degree. I have about $6k to invest and i would like to invest it to make a career change for my future but i don't know which path to take. I would like my next career to be more technical etc. Please note: After this CERT stage, i plan to get a master in Information systems. I'm a social person, i have an interest in IT but I'm not sure what will be a better ROI. ANY ADVISE IS MUCH APPRECIATED!!!
Rookkiiee wrote: » ...training and get my hands dirty (but i dnt want ot go into desktop support etc. (no disrespect to anyone))
I'm leaning towards the Security industry as it is hot right now and looks good for the future. As someone who is non-technical should i do the MCSA and Security+ OR go ahead to CSSIP ???
dynamik wrote: » The previous two points culminate in this one. You have to love this stuff in order to be successful. If you are just in it for the money, you will more than likely not succeed and end up wasting a great deal of time and money. Every aspect of IT is constantly changing, and you have to keep up with that if you want to be successful. My salary would probably seem pretty good to you at first glance. However, if you factor in that I spend an average of four hours/day studying (more on the weekends), you might reevaluate that. I don't mind because I find what I'm working on to be interesting, so it's not technically "work" for me. If you're not the same way, it's going to be a chore, and you're not going to stick with it.
Rookkiiee wrote: » I think what I'll do is pursue the the PMP/CAPM and seek a "semi" technical position and gain some experience to direct me to where i need to be. For who asked, As for my age, i'm 28 yrs old and have an interest in SECURITY/IT AUDITS AND CONTROL
what are your opinions on people who are not "technical" trying to manage a technical project? is that a joke?
Rookkiiee wrote: » what are your opinions on people who are not "technical" trying to manage a technical project?
Rookkiiee wrote: » VERITAS, Good luck on the exam Nov 17th!!!
Rookkiiee wrote: » THANKS FOR ALL YOUR RESPONSES AND ADVISE I agree and understand with all what you have stated. It sounds to me like i need some soul searching. I think what I'll do is pursue the the PMP/CAPM and seek a "semi" technical position and gain some experience to direct me to where i need to be. For who asked, As for my age, i'm 28 yrs old and have an interest in SECURITY/IT AUDITS AND CONTROL what are your opinions on people who are not "technical" trying to manage a technical project? is that a joke?
Rookkiiee wrote: » what are your opinions on people who are not "technical" trying to manage a technical project? is that a joke?
Rookkiiee wrote: » To dynamik, can u elaborate on the leverage thing? how would one go about doing this? perhaps the CISA?? To Veritas, i mention PMP/CAPM. u r right i need experience. I'll probably opt for the CAPM first while i gain the experience needed for PMP... R
Rookkiiee wrote: » Hi Turgon, when you say Trainee/presale, r u a referring to technical sales position??
tpatt100 wrote: » How can you secure something which you have no experience in? How can you audit an IT system if you don't even know how to get to let alone use the Microsoft Management Console or even SSH to a Unix box? I had to certify a 2008 Server box this morning before I would authorize it to join our classified network today. It required applying a local security policy and then running through 75 pages of audits to ensure settings were applied, registry settings were set and then my signature authorizing the box but also saying "I approve this box" so anything from that date and time to first install says the box is secure and configured to our standards but is also accountable to ME that it is secure. Something goes wrong and the box is compromised and it gets audited and discovered I missed a setting then it is my butt on the line.I have been doing security, certifying and auditing for about 6 years now and the years of helpdesk, desktop support and LAN Admin allow me to fly through auditing and certifying because I know where everything is.
dynamik wrote: » I agree with the point you're making 100%. Of topic though, isn't there a way you can automate some of that or at least aggregate all that data?
tpatt100 wrote: » Depends on the certifying standard you use. Applying settings most of them are automatic like group policy settings, if the box joins the domain it will get most of the settings. But for my current and last job a lot of the audits are manual check audits. Since you are the authorized certifying security guy you can sign off on things the standard wants like: 1. You have checked to see if a paper copy of the security policy is available and a current copy. 2. You certify the box is located in a secure facility (which at my last job required me to check with the external site so I could sign off on the check box). IAVA checks are verified with scanning tools to check for unix/windows vulnerabilities but that is a whole other section of the certification. This link is where I used to get the stuff and the checklists:http://iase.disa.mil/stigs/checklist/index.html If you check some of them, just pick Outlook for example its 88 pages of checks. They give you tips but don't hold your hand to walk you through most of the stuff.
Compare salaries for top cybersecurity certifications. Free download for TechExams community.