Infosecurity Professional - Issue 9 - ISC

More documents

Recommendations

Info

Each year, (ISC) 2 participates in more than 50 conferences and trade events around the world. On behalf of its members, (ISC) 2 works with the organizers of each event to secure the most valuable discounts available for attendees. To learn more about these discounts and obtain the application codes, visit www.isc2.org/events and search for events in your region. Typically, multiple discounts cannot be combined. In addition, (ISC) 2 Security Leadership events are free for members. Upcoming dates include: San Antonio, TX: March 16 Philadelphia, PA: April 8 Chicago, IL: May 11 Washington, D.C.: May 24 and 25 * Visit www.isc2.org/events for updates on Security Leadership events in Boston, Dallas, Baltimore, Seattle, Marina del Rey and Charlotte later this year. to password security. If your paper doesn’t make the cut, you can volunteer in other ways. Conferences may allow individuals to edit papers, make speaker introductions and/or perform administrative duties. These tasks help keep the conference costs down and give others the opportunity to get involved. 4 Get Networking It’s important to build your contacts at conferences, not only for the long-term growth of your career, but also for day-to-day technology and information security advice. Here are some easy ways to meet new people: n Almost everyone will have a name tag with their company’s name, too. Use that as a conversation starting point. For example, at one conference I met a person who worked at an insurance company I was a client of. He wanted to hear what I thought of the company’s Website, and I wanted to know how the firm kept information private and secure. We traded information and e-mails. Remember that many people get nervous in social situations; just saying “hello” or asking about their company are excellent ways to get a conversation going. n Volunteering at conferences is a powerful way to network. For example, by handing out feedback surveys you can informally and quickly meet many people. Introducing a speaker gives you a quick public relations opportunity: about 30 seconds with a microphone to talk about yourself and your company. n Most of the conferences include meal breaks, which are a great time to meet people. If nothing else, you’ll overhear conversations on the latest news, trends and technologies, or how someone is dealing with a particular information security challenge. You might even be able to chime in on the discussion. 4 Get Writing Take notes at all different times during the conference: the speaker sessions, open sessions, lunch meetings, breakout groups—even off-the-cuff discussions at networking sessions. Spend some time at the end of each day reviewing your notes and creating a concise summary to e-mail to your manager. These daily summaries should focus on who you’ve met, what you’ve learned, and how those people and ideas can benefit the company. Not only does this demonstrate you are involved in the conference, it may give your manager some good ideas for upcoming initiatives. 4 Get Real The present fiscal reality means you may not be able to attend a particular conference, no matter how much you prepare. Before spending money on conferences, many companies want to know the ROI. To overcome financial concerns, start small. If the organization behind a large international conference has a local chapter, attend one of their forums or meetings. For example, if you can’t make the annual RSA Conference in San Francisco or London, try to attend a networking meeting closer to home. You can also gain specialized knowledge—on topics such as security risks, capacity management or audits—through Webinars. Make sure to stay current on information in whichever specialty you choose. Sooner or later, your company’s conference budget will loosen, and by having an established knowledge base, you’ll have stronger justification for being sent to a large, international conference on the topic. Another alternative is for you to pay for part of the conference. Sometimes a willingness to help goes a long way. But remember, you are going to the conference to gain insight and information. If all you want to do is have fun, then it might be best to just take a vacation. 4 Get Going! Going to a conference can be overwhelming, but you can make it a valuable experience for you and your organization. Some conference sites provide ready-made reasons you should attend. For example, the Computer Measurement Group offers tips on how to justify attending its conference (www.cmg.org/ conference/justify.html). It also offers a one-day special. And if your paper is chosen for presentation, attendance on presentation day is free. Getting involved can bring some great benefits. It’s up to you to get going. Chris Greco, CISSP, PMP, is a public service IT specialist and program manager based in Maryland. He can be reached at grectech@att.net. 18 InfoSecurity Professional ISSUE NUMBER 9
career corner professional advice for your career A Career Bright Spot Certifications can boost pay and career prospects, reports Efrain Viscarolasaga. Security is a priority for most organizations, so information security is a bright spot among IT careers—despite the current recession. Recruiters report that workers with an information security background are still in high demand, and because the industry changes constantly, employers are looking for professionals with experience in the latest trends, from international data protection to biometrics. Information security professionals can bolster their resumes and their careers with certifications. A recent survey by CompTIA, a global nonprofit IT research firm, reported that 37 percent of 1,500 responding IT workers intend to pursue a security certification over the next five years, while another 18 percent will seek a certification related to ethical hacking. Thirteen percent will pursue some type of computer forensics certification. “Because a lot of people are not employed, many are taking the opportunity to become more certified,” says Rebecca Virtanen, a senior technical recruiter for Boston-based AVID Technical Resources Inc. “And for higherlevel positions, some [employers] will only consider candidates with certain certifications.” Senraj Soundararajan, president of technology resources provider Ivesia Solutions Inc., says the trend is similar on an international level. In India, for example, where the number of applicants far exceeds the number of available positions, employers often exclude applicants without certifications. Certifications lead to better, higher paying jobs for candidates, and stronger career opportunities for those who are already employed. According to Foote Partners’ recent IT Skills and Certification Pay Index, security certifications premium pay has increased by 2.4 percent since the beginning of the recession, while the premium pay of other IT certifications has dropped by an average of 6.5 percent. The survey also lists the leading topics in security certification: security architecture; forensics; incident handling and analysis; intrusion analysis; auditing; ethical hacking; network security; secure software development; and security management. Foote Partners president David Foote is bullish on the security sector. “Bar none, for shortand long-range IT job security, the smartest place to be in 2010 is security. Pay and demand for security skills have risen steadily since 2007 and headcount has not diminished despite economic hard times,” he says. Whether you’re looking for work, hoping to solidify your current position, or trying to grow your career, certifications can help. And the time to get started is now. Efrain Viscarolasaga is a freelance business and technology journalist based in New Hampshire. photo top by moodboard/corbis issue number 9 Infosecurity Professional 19
Page 1 and 2: issue number 9 An (ISC) 2 Digital P
Page 3 and 4: issue 9 2010 VOLUME 1 14 To view th
Page 5 and 6: executive letter From the desk of t
Page 7 and 8: (ISC) 2 MEMBER NEWS (ISC)² Hires F
Page 9 and 10: The password to your future is NSU.
Page 11: illustration by SASHIMI/theispot be
Page 14 and 15: son’s social position. “Breache
Page 16 and 17: You’ve probably developed, or are
Page 18 and 19: frankly, your enemy.” The more ti
Page 22 and 23: global insight international inform
Page 24: The one security blanket you won’

Infosecurity Professional - Issue 9 - ISC

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?