Chapter 14: Information Security Professional Certification Prepared by:Kyla Claire Liberato Cisco challenges applicants differently depending on the level of certification. Entry- level certifications require only a single exam; more advanced certifications require multiple courses and exams. Cisco also offers multiple paths for associates, professionals, and experts. These paths enable Cisco credential holders to specialize in specific areas. You can earn a Cisco certification in the following paths: 1. Design 2. Security 3. Voice 4. Wireless 5. Routing and switching 6. Service provider operations Juniper Networks Juniper Networks manufactures a variety of network security hardware and software. It is a company that specializes in networking technology and solutions. Like Cisco , Juniper Networks offers multiple certification levels and different tracks. RSA RSA is a global provider of security, risk, and compliance solutions for enterprise environments. RSA products include identity assurance, data loss prevention, encryption, and tokenization devices. RSA offers several certification options. RSA currently offers certifications for RSA Archer and RSA SecurID. Prepared by: Macahis, Michelle A. Symantec The Symantec Corporation provides a wide range of security software products. Like other vendors we’ve mentioned, Symantec offers certifications for its product lines. These certifications provide specific product training and validate practitioners’ knowledge and skills related to the Symantec product line. Here is a list of the available certifications in the Symantec Certified Specialist (SCS) program: •Administration of Veritas Storage Foundation 6.0 for UNIX •Administration of Veritas Cluster Server 6.0 for UNIX •Administration of Symantec NetBackup 7.5 for UNIX •Administration of Symantec Enterprise Vault 10.0 for Exchange •Administration of Symantec Endpoint Protection 12.1 •Administration of Symantec Backup Exec 2012 •Administration of Veritas Storage Foundation and High Availability Solutions 6.0 for Windows •Administration of Symantec NetBackup 7.5 for Windows •Administration of Symantec Client Management Suite 7.1/7.x •Administration of Symantec Management Platform 7.1 •Administration of Symantec Clearwell eDiscovery Platform 7.x •Administration of Symantec Data Loss Prevention 11.5 •Administration of Symantec Network Access Control 12.1 Symantec also offers a more advanced certification. The Symantec Certified Professional (SCP) represents more experience and more in-depth knowledge than the SCS certifications. Currently, Symantec offers the SCP certification for Cloud Security. Check Point Check Point is another global manufacturer of network and security devices and software. Check Point provides training and certification paths for security professionals to encourage the highest level of knowledge and skills in the use of Check Point products. Security professionals have several certification options and can choose from among three tracks and three levels. Check Point certifications require that applicants pass an exam that involves 80 percent study materials and 20 percent hands-on experience. Chapter Summary In this chapter, you learned about some of the available security certifications. Although security certifications don’t guarantee competence, they can provide employers with confidence that the credential holder possesses a standard level of knowledge and skills. Most organizations issue credentials for limited time periods, so you can also determine that a current credential relates to current knowledge and skills. You learned about vendor-neutral and vendor-specific certifications. Professional certifications from organizations such as (ISC)2 and CompTIA offer vendor-neutral certifications. Vendors such as Cisco, Juniper, and Check Point all have vendor-specific certifications. You also learned about the U.S. DoD/military directive 8570.01 defining a standard for information assurance training, certification, and workforce management. This has been replaced with the newer role-based Standard 8140 for cybersecurity workforce development. You should use certifications to help you direct your learning and measure your knowledge and experience throughout your information systems security or information assurance career. However, don’t measure your value or abilities only by the number of certifications you hold. Employers do use certifications to help assess prospects, but the best assessment is the prospect’s actual performance.