Unauthorised Access: Physical Penetration Testing For IT Security Teams

E.1.3. Global Information Assurance Certification

The SysAdmin, Audit, Network and Security Institute (SANS) is a very highly regarded source of information security training and certification. They provide a number of courses in the field of technical information security and their Global Information Assurance Certification (GIAC) is first rate. There are four areas in which you can acquire accreditation and SANS offers training courses in each:

• Security administration.

• Management.

• Audit.

• Software security.

As an individual progresses through the different tracks, he or she can achieve Silver, Gold, and Platinum levels of GIAC certification:

• Silver Certification – You must pass an exam in one area. A GIAC Silver Certificate ensures that an individual has learned the practical real-world skills covered by his certification. For example, if you want to hire someone with skills in security policy auditing and implementation, then a GIAC-certified ISO-17799 specialist would be a good bet.

• Gold Certification – This certificate requires candidates to research and write a detailed technical report or white paper, showing deeper knowledge of the subject area. The idea is that an individual is qualified to research and share their knowledge with others.

• Platinum Certification – You must hold three GIAC certifications with at least two of them passed at gold level. The platinum exams include individual and group hands-on computer security exercises, individual presentations, group presentations, ...