SANS Security Essentials Training

[Oakenfold]

Anyone have thoughts on the Sans SEC 401 training?
http://www.sans.org/security-training/security-essentials-bootcamp-style-61-mid

I'm considering training opportunities for next year. Any thoughts or personal experiences?

 

[seepy83]

I took SEC 401 in 2009 through what they now call vLive (online instructor-led). SANS is an excellent resource for Info Sec training, and if you score 90 or better on the GIAC Certification Exam, you can join the Advisory Board mailing list which is an excellent way to network with other Info Sec professionals, ask questions, stay up to date with current threats and technologies, etc.

When I took it, I was already familiar with somewhere around 40% of the content, but I still thought that all of the time spent was worthwhile. Even if some is review, it's a great way to reinforce the knowledge and concepts that you already know.

As far as I'm concerned, SANS is the best institution for Info Sec training. I plan to continue my security training with SEC501 probably in the second half of 2011 and then I'll figure out the best path for me after that (because I'm not strictly Info Sec by job title/description).

 

[ScottFern]

Are the SEC 401 and SEC 501 better certifications to obtain and easier than the CISSP? I am considering a Security Administrator opportunity and wanted to know whats the best way to grow that knowledge?

 

[seepy83]

Scott, the GIAC website has a pretty good article that compares GSEC (the cert for SEC 401) to CISSP. You can read it here: http://giac.org/certified/certmatters/gsec_cissp.php

Basically, CISSP is high level and very broad. GSEC is has more depth to it and relates more directly to the daily tasks and work performed by a Sec Admin.