3 ms·
This. So much this. Writing and general social skills are the number 1 thing lacking with people I interact with in the industry. The I know more than you attit
by ganoushoreilly 10y ago
This. So much this. Writing and general social skills are the number 1 thing lacking with people I interact with in the industry. The I know more than you attitude is great amongst peers, but with clients, you don't have to prove you're smarter, instead your job is to make them smarter.
Break it down to a 4th grade level, if you can't, you likely don't understand it yourself.
I would agree that in general certs have too much weight, but the reality of it is, as it stands, they're the closest bridge / standardization that the market has built for non-Security ilk.
Also, Security is not IT. That's another thing that needs to change.
As for OSCP, I think it's great and out of all the certs i've taken for various reasons, it's the only one I felt challenged with, in a good way.
- thwarted 10y agoAlso, Security is not IT. That's another thing that needs to change. Do you mean that Security is not currently IT and it should be or do you mean Security is considered to be IT and it shouldn't be ? The amount of stress that you mean to put on the word "not" doesn't come through very well in this medium.
- ZeroManArmy 10y agoI feel like he means it's generalized into the spectrum that falls into IT. Security should be more of specialization, less toolbox?
- Spooky23 10y agoSecurity should be IT. Otherwise, you get a bunch of bullshit cya reports and policies that aren't achievable by the technology deliver people. Security should have an advisory role to the corporate governance folks who maintain policy... usually the lawyers.