RE: OT: CCIE Security Vs CISSP

IMHO, each has their strengths and pitfalls.

I have the CISSP and am working on the CCIE Security. I've had the CISSP for
almost 5 years now and it has been somewhat helpful in my career. The CISSP
covers 10 CBKs:

Information Security and Risk Management
Computer Operations Security
Physical (Environmental) Security
Security Architecture and Design
Access Control
Cryptography
Telecommunications and Network Security
Application Security
Business Continuity and Disaster Recovery Planning
Legal, Regulations, Compliance and Investigations

As you can see, this covers a much wider base of knowledge. The analogy is "a
mile wide and an inch deep". The certification requires:

1. Documented proof of security experience in your career.

2. References that can validate your expertise.

3. Paying for the test (cheaper than the CCIE Lab).

4. 1 x 6 Hour test w/ 300 Questions.

5. Once passed, yearly continuing education and membership dues (cheaper still
than the Lab).

Many IT/IS auditing functions / positions call for this as well as the CISA or
SSCP. Additionally, this is a vendor agnostic test that covers security from a
standards approach (ISO / RFC).

As for the CCIE Security, this would be more of the "inch wide and a mile
deep". While it is a great certification, it really is all about implementing
and troubleshooting Cisco security technologies. As the lab is only 8 hours,
they can only test you on a subset of the overall solution set that Cisco
provides and again, it is Cisco centric. Passing the CCIE Security does not
require deep knowledge of security guidelines, laws / industry requirements
(PCI) and does not cover multi-vendor solutions. Personally, I am working on
the CCIE Security and R/S to round myself out as an engineer and architect.

Good luck with whichever path you choose !

Travis

> Date: Wed, 5 Aug 2009 08:50:41 +0300
> Subject: OT: CCIE Security Vs CISSP
> From: mrnauman_at_gmail.com
> To: ccielab_at_groupstudy.com
>
> Dear experts,
>
> Which will be in ones best interest keeping in view the future prospect of
> networks.
>
> i Have seen discussion about CCIE Security - but why not go for CISSP ?
>
> Regards,
>
> Nauman
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
Received on Tue Aug 04 2009 - 23:08:29 ART