Path to Become an IT Security Professional

101 23
Information security certifications are bench markers that are supposed to assess an individual's theoretical and practical knowledge within specific security disciplines. To ensure that these certifications continue to be taken seriously and do not end up as ‘paper certifications', people should not rush through the training and study processes and follow a proven learning methodology.

Attempting to take a security certification exam should be taken seriously, not just because someone wants to pass the exam and earn a new credential, but in the world of information security – ‘knowledge is king' and ‘the new rich is smart'.

Everyone has worked with people who have gotten jobs based upon the information within their resumes. We have all seen HR departments make poor choices when hiring new individuals by just looking at the letters that follow their names and not actually assesses true knowledge or experience of these new hires. Obtaining credentials through exam crams, test dumps, and test taking tricks does not benefit anyone – including the people who obtain these newly minted certifications.

The field of information security is complex, evolving, complicated and should have a high bar of entry. The people who carry out information security tasks are doing important work that can have far reaching negative affects if mistakes creep in. The technology that our society depends upon increases in complexity almost daily and the cyber criminals' tactics increase in sophistication just as fast. If someone wants to actually make a difference in the world of information security, a deep knowledgebase needs to be obtained along with extensive practical experience. While there may be tricks to memorizing items for a test, there are no tricks when it comes to getting smarter. A methodical approach to learning should be followed in a patient and stepwise manner.

We all know that people learn differently. Some people learn best from reading books, others soak up information quickly in lecture-based classes, and some people are more visual than others or are more audio-focused. And everyone usually learns more from hands-on activities. But even if someone comprehends material more quickly through reading, it is always better if concepts can be reinforced through other media types in an integrated manner. If a student attends a class, reads a book, works through practice exams, carries out some labs and listens to audio files – this person will have a more complete understanding of content compared to just working with one media resource type. Each of these media types are processed by the brain differently. Data is not just stored on one central hard drive in the brain; it is stored through different encoding functions and can only be reached through specific stimulation senses. So in computer terms, data enters different input interfaces while being learned. When a person has to actually use this learned data, the data goes out different output interfaces. The more data that enters the various input interfaces can be stored in different locations in the brain and ‘served up' more effectively when the brain needs to figure out a problem.

Unfortunately most approaches to learning and training are focused on one or two single learning methods. People usually read books and attend classes. While these are useful and beneficial ways to learning, our brains are always active and always ready to suck in data. If a student wants to learn concepts holistically, integrating self-study audio files into study activities are very useful. While driving, working out or doing the dishes – your brain has the bandwidth and cycles to be learning by listening. Our brains also learn through repetition, so taking the time to test one's knowledge as it is being learned is an efficient way of ensuring that study approaches are actually working. If one wants to make sure that the theoretical, book knowledge can actually be used in the practical and real world – hands-on labs and simulations are critical. Everyone has five senses, which are our input interfaces to the brain. Providing the material that needs to be learned to each of these senses through a disciplined learning methodology is the best way to ensure the brain has absorbed the things it needs to know and will be properly prepared when called upon.

These various learning approaches are not commonly integrated into training solutions that prepare people for security certification exams because it is more expensive for the training companies to develop and deploy. Unfortunately individuals seeking a new credential commonly want a ‘quick fix' and choose training solutions that they think will get them through their certification exam quickly. Training companies need to please their customer base to stay in business, so they provide training that is short, condensed, and commonly full of test taking tips. These approaches are short sided and provide no long term benefits to anyone involved, including the information security field as a whole.

The same adults who attempt to pass certification exams without making sure that they actually have the associated knowledge would probably not tell their children to fake it through school and to learn all the short cuts possible. These adults would want their kids to have all of the possible opportunities available to them in life so that they can be successful, happy and healthy. These parents try to enforce hard work ethics into their children and tell them things like ‘You get out of it what you put into it.' But these things do not end at childhood. Learning takes time, patience, and consistency. Taking the proper time to learn critical concepts for one's career is one of the best investments one can do.

Experienced educators as in Shon Harris at Logical Security build training solutions based upon proven learning methodologies that integrate media learning tools for each of the brain's sensory input interfaces. Lectures, books, assessment simulators, labs, and MP3 audio files are combined in an integrated method that reinforces topics and concepts. This approach will last a lifetime, not just to get you past a test. The training will assist you in real life as well as after you become a CISSP certified information systems security professional.

You can learn more about this learning methodology at Logical Security.

Logicalsecurity.com is a company offering high quality training solutions that ensure people achieve their certifications and much more.

Subscribe to our newsletter
Sign up here to get the latest news, updates and special offers delivered directly to your inbox.
You can unsubscribe at any time

Leave A Reply

Your email address will not be published.