« Infosec Europe Hall of Fame | Main | Non-company equipment on our networks »

CISSP - is it worthwhile?

I was dissapointed to learn that one particular large business in London has opted to stop considering job applicants who hold a CISSP certification. This, apparently, results from candidates who hold the certification failing to impress at interview. Unfortunately I can't link to any references for this particular information however it originated in person from a senior authority within the industry.

With this being the case, it somewhat undermines at least two of the core objectives of the certifcation. The ISC2 website describes these as follows:

Benefits of Certification to the Professional

  • Demonstrates a working knowledge of information security
  • Confirms commitment to profession
  • Offers a career differentiator, with enhanced credibility and marketability
  • Provides access to valuable resources, such as peer networking and idea exchange
  • So, is the certification still worthwhile making the effort for? Yes it is! There will always be a minority quick to rubbish the value of qualifications - unfortunately some of those individuals are going to be in positions of responsibility to the detriment of people working hard to get ahead in their careers.

    I'm also not doubting that there are going to be some who have the qualification but don't make good job candidates. That doesn't diminish the value. It is what it is: a tough paper-based exam which demonstrates that an individual has knowledge. It is not a test of character or technical skill.

    So, for those of you working and studying hard to achieve the CISSP, don't be disheartened. There will always be a small number of cynical old sods out there ready to rubbish hard earnt qualifications.

    TrackBack

    TrackBack URL for this entry:
    http://www.computerweekly.com/cgi-bin/mt/mt-tb.cgi/14150

    Post a comment

    (If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

    About

    This page contains a single entry from the blog posted on November 3, 2007 9:59 AM.

    The previous post in this blog was Infosec Europe Hall of Fame.

    The next post in this blog is Non-company equipment on our networks.

    Many more can be found on the main index page or by looking through the archives.