WebApp Sec: RE: Notes from CISSP class with Dr. Eric Cole

["Harley David" <David.Harley () cfh nhs uk>]

> the CISSP answers are structured around knowing definitions,
> terminology and concepts particular to CISSP study materials, 
> not those used in real life nor real life complexity in 
> systems and security management.
But that is real life...

Exam-based certifications are based on knowledge of a predetermined
body of what the certifying organization defines as knowledge, more
or less by definition. Problem solving in a real life situation
may be based on that Common Body of Knowledge, as ISC2 call it,
but exams generally attempt to measure knowledge, rather than
skill in -applying- knowledge.
 
-- 
David Harley 



This e-mail is confidential and privileged. If you are not the intended recipient please accept our apologies; please 
do not disclose, copy or distribute information in this e-mail or take any action in reliance on its contents: to do so 
is strictly prohibited and may be unlawful. Please inform us that this message has gone astray before deleting it. 
Thank you for your co-operation.