New Year, New Changes in Security Training!

As the new year comes upon us, vendors are rolling out some new or updated courses for the beginning of 2012, but what type of training is right for you or what new courses are worth the time and money?  The answer depends on what area of security you want to pursue.  I always recommend having a very sound understanding of the basics in networking and operating systems if you are getting into security for 2012. As for those of you who already work in security, there are some new and updated courses coming out for 2012 that are very exciting.


One of the things you need to look at is does the course help me understand the security concepts and does the course provide a hands on example for reference.  Some courses discuss a concept but then nothing to really help solidify the concept such as an example.  Also, if you are looking for the latest and greatest in concepts and examples, most vendor classes are about  6 months to a year behind.  It is up to the instructor to provide up to date examples for current concepts.  The instructors background and experience play a major role in filling in the gaps.


So what are the up to date and new courses for 2012? 


Updated Courses


Network+ - 
CompTIA has update the Network+ for 2012 with a more of an emphasis on technologies and how they relate to the OSI model.  I like the fact that they have made more of an emphasis on the areas of SANS and WANS.  However I would say that the course still covers 85% of the previous objectives.  It is not really a huge upgrade, more of an incremental update.


CEH version 7.1


Eccouncil has brought out new revision from their version 7.0 of this class.  This is a major update with even more update labs and content than the previous version 7. 


New Courses


CSAP


This is a new course from CompTIA intended to focus on the 10 year security veteran.  It focuses a lot on Enterprise LAN and WAN security.  As of this writing not to much is known about the CSAP and it may be a while before we know anything more definitive.

Good luck in 2012 and hope you have a great year.

- Tom Pruett, Cisco & Security Expert; MCT, CTT+, CISSP, CWNA, CEH, CHFI, CCSI, CCNA, MCSE LinkIn with Tom

CompTIA Network+ 2009 - I already work in IT, so what is the big deal?

Throughout my consulting and teaching career, clients and corporate students have always said to me "I don't need to take a networking class, I have been working in IT for many years, why should I?"  

Well times have change, long gone are the days of working in desktop support or help desk or application support and not having to know anything about the network infrastructure that all these groups based their daily activities on.  Today's IT professional needs to keep up with the ever changing world of technology.  Everyone  needs to understand how all of the big parts of IT work or fit together.  CompTIA's 2009 Network+ course is not your old out of date Network+ class.  This course has been updated to include discussions on several area of technologies that have evolved over the last 5 years along with up to date information.   

Top Reasons Why You Should attend a Networking Class
1)  Think about your job and how it impacts the network.  The knowledge attained by learning how a network device and network protocol work, may help in troubleshooting an application.  Also, it may help the network engineers in troubleshooting your application problem.
2)  Think about how your job impacts the security of the network.  Security is every one's responsibility.  How can you secure something if you do not know how it works.  Understanding the vulnerabilities in how an application works within a network, provides a better understanding of threats and risks to the application or users you support.
3)  Last but not least, it never hurts to not only get training on a network but also get a certification which can be beneficial with your experience.
The bottom line is no matter what area of IT you are in, networking knowledge is a must, regardless if your job requires this knowledge or not.  Even if you will never be responsible for a switch, router, firewall or remote access server, knowledge of these devices and how they work will benefit you whether in supporting or troubleshooting.
 

Good luck and if you have any questions please feel free to contact me. 

- Tom Pruett, Cisco & Security Expert; MCT, CTT+, CISSP, CWNA, CEH, CHFI, CCSI, CCNA, MCSE LinkIn with Tom

Security+: Do you really need this certification?

In the past year I have been asked a couple of questions regarding the Security+ certification.  "I already have experience, why do I need to get Security+ certified? or "Is the Security+ certification worth anything anymore?"  The answer to both questions is a definite yes.

Over the past 10 years security has become a very prominent part of IT.  The need for well qualified individuals in security has increased.  There is not not one company that is not thinking about security.  Security has come to the forefront of IT due to the increased exposure to networks.  The exposure comes from the internet.  With all of this exposure comes the need to protect our personal and company assets.

So, how does the Security+ certification play a role helping protect our personal and private networks?  Knowlege knowledge and more knowledge.  That is the answer.

IT security is not just limited to single area of knowledge.  It actually encompasses all areas of IT.  Think about all the different systems, applications and OS's your company has running?  All of those have different needs for security.  So to be in security means to be knowledgeable in a lot of areas of IT.

Security+ certification provides you with exposure to all of the different areas of security for different systems, application and OS's.  No, it does not mean you will be an expert in security for all of these systems, but it does mean you will have exposure and an understanding of what it means to secure these systems.

Security is a journey not a destination.  There is not one person who knows everything about security.  Security knowledge comes from knowing how to defend your systems against different types of threats.
However for some, network defense comes from knowing how a system or OS works.

Security+ provides that base knowledge for security, network defense and hardening systems.  You could say it is a mile wide and a 2 inches deep.  Once you have the exposure to this knowledge then you can go into one of many areas of security such as: ethical hacking, firewalls, IDS, IPS, security policies, Cisco routers and switches or internet security.

As for the question is the Security+ certification worth anything?  Just ask anyone in the military or government who has to work on a secure system.  They are now required to be Security+ certified to work on said systems.

So if you are looking to get into security or need to start getting certified in security for other areas.  The Security+ certification is the place to start.

If you have any questions about Security+ certified, please feel free to contact me.

For more information on Security + click here.


- Tom Pruett, Cisco & Security Expert; MCT, CTT+, CISSP, CWNA, CEH, CHFI, CCSI, CCNA, MCSE LinkIn with Tom