Security Basics: Fwd: Re: Security Auditing ?

["David Harley" <david.a.harley () gmail com>]

---------- Forwarded message ----------
From: David Harley <david.a.harley () gmail com>
Date: 2008/9/4
Subject: Re: Re: Security Auditing ?
To: mordawdz () gmail com


2008/9/4  <mordawdz () gmail com>:
> CISSP and CISA should not be prerequisites to upper-management positions at all.  Experience is.  Not certifications.
Certification -and- experience carries more weight than one or the
other. A cert doesn't guarantee that the holder is competent to hold
-any- position, but it's a viable indicator...

> Neither CISSP or CISA will give you the knowledge you need to perform management duties and take the right security 
> calls.  Only experience will.
Is there any chance we can kill this myth once and for all? Both CISSP
and CISA certificationsrequire several years of experience as well as
an exam.

--
David Harley