The True Value of Cybersecurity Certifications

Summary

The speaker reflects on their 30th year in the industry and their strong belief in the value of certifications. They highlight their own pursuit of top certifications like CISSP, CISA, and CCSP, emphasizing their role in validating skills and knowledge. The speaker advocates for the 'right way' to earn certifications, which involves more than just studying for the exam but also understanding the thought process behind them. They also discuss the benefits of classroom learning and the importance of vendor-neutral certifications for a holistic understanding of security controls. The conversation ends with the speaker's plans to continue pursuing certifications, aiming to complete the top 10.

Takeaways

• 🎂 The speaker is entering their 30th year and feels old, but remains a strong supporter of certifications.
• 📚 They have pursued certifications like CISSP and S Gack from the beginning of their career, emphasizing the importance of continuous learning.
• 🔍 The speaker has been observing the top 10 certifications in the industry and has acquired six of them, highlighting their dedication to professional development.
• 🛡️ Certifications are seen as a way to validate skills and knowledge, combating the imposter syndrome that many professionals face.
• 📈 The right way to approach certifications involves respecting the credential, studying the material thoroughly, and not just memorizing exam questions.
• 🤖 Certifications are not about memorizing commands but understanding situations, conflicts of interest, and best practices for information security.
• 💼 Having certifications can help secure jobs as some organizations still require credentials as a form of validation.
• 🏆 The speaker values the CISSP as a baseline certification that everyone in the industry should consider obtaining.
• 👥 Recommending classroom or boot camp experiences for certifications, as they offer unique learning opportunities through peer collaboration.
• 🌐 The speaker plans to continue pursuing certifications, focusing on vendor-neutral ones to understand the full context of security controls.
• 🚀 There's a future plan to acquire more certifications, aiming to complete all top 10, showing a commitment to ongoing professional growth.

Q & A

What is the speaker's view on the importance of certifications in their career?

The speaker believes that certifications are valuable for several reasons, including validating skills and knowledge, combating imposter syndrome, and providing a baseline for understanding different areas within the industry.

What certifications does the speaker mention as being particularly valuable in the field of security?

The speaker specifically mentions CISSP, CISM, CISA, CRISC, Certified Ethical Hacker, and CCSP as some of the top certifications that are valuable in the security field.

How does the speaker feel about reaching their 30th year in the industry?

The speaker expresses that reaching their 30th year in the industry makes them feel old, but they also acknowledge it as a significant milestone.

What does the speaker consider as the 'right way' to approach certifications?

The speaker believes the right way to approach certifications is by respecting the credential, engaging with the material deeply, learning from various perspectives, and not just studying for the practice exam.

Why does the speaker emphasize the importance of not just relying on memorization for certification exams?

The speaker emphasizes this because they believe certifications should validate real understanding and skills, not just the ability to memorize and regurgitate information.

What does the speaker suggest about the value of certifications in securing jobs?

The speaker suggests that certifications can help secure jobs as some organizations and industries still ask for credentials as a form of validation from candidates.

How does the speaker view the role of certifications in building confidence in one's field?

The speaker views certifications as a way to build confidence by validating one's knowledge and skills, which can be reassuring, especially in a field as complex as security.

What is the speaker's opinion on the use of AI and its potential impact on understanding fundamental concepts?

The speaker is concerned that reliance on AI for tasks like searching for command lines could lead to a lack of understanding of fundamental concepts, which is crucial in the field.

Why does the speaker recommend attending a boot camp or classroom setting for certain certifications?

The speaker recommends this because of the collaboration and learning that can occur between peers, which can provide different perspectives and insights into various industries and scenarios.

What is the speaker's strategy for pursuing further certifications?

The speaker plans to focus on vendor-neutral certifications rather than vendor-specific ones to gain a broader understanding of technologies and security controls.

Does the speaker plan to pursue all of the top 10 certifications mentioned?

Yes, the speaker has plans to pursue all of the top 10 certifications, with a focus on continuing to learn and grow within their field.