Testimonials -Check out our testimonials! What does the Q/ISP®Logo Represent? The Q/ISP logo represents the highest commitment to being a Qualified Security Professional. This custom logo was created to honor qualified security professionals who achieve SU's Qualified Security Skills certifications that validate tactical hands-on security skills. Earn the most valued set of security certification/ licenses in the world. Your Q/ISP & related SU certifications shows others you have validated your tactical hands-on security skills.
The skull represents commitment and brains.
The ribbons symbolize integrity and honor.
The wings help you soar towards your true potential (& above the turkeys you work with). The 4 Aces & King cards attest that you've mastered tactical security skills to reduce risk.
Q/ISP Certification WHAT IS THE SU Q/ISP® CERTIFICATION? The Q/ISP® certification is obtained through SU for the purpose of recognizing "qualified individuals" who have distinguished themselves as knowledgeable and proficient information security practitioners who have validated their hands-on tactical security skills.
The Q/ISP® certificate and related certifications Q/EH®, Q/SA®-Q/PTL®, Q/FE®, Q/ND® provides THE only means of identifying and certifying "qualified persons" who subscribe to a rigorous requirement for maintaining their knowledge and proficiency with validated security skills and hands-on practical security experience Security University is the world leader of
Qualified Hands-On Tactical Security Skills Classes, Certifications and Licenses for IT Security Pros. Qualified Instructors wanted!
For SU's Q/EH® Qualified/ Ethical Hacking, Q/SA®-Q/PTL® Security Analyst Pen Tester, Q/FE® Forensics, Q/ND® Network Defense, Software Security.
The SU Q/team needs U! - E-mail us atinfo@securityuniversity.net CISSP® is a registered trademark of (ISC)2®
SU CISSP Prep classes are not endorsed or sponsored by (ISC)2®
CEH® CHFI® are EC Council registered trademarks
As an Army Information Systems Management (FA53) officer focusing on Cyber Defense, I've had the opportunity to train and certify in several IA/CND specific programs as well as work a myriad of Army Cyber Defense workforce training and development issues.
Having just recently completed the Security University (SU) Qualified Security Analyst (Q|SA) and Qualified Penetration Tester License (Q|PTL) courses I can confidently say that Sondra and her team have built an exceptional program of instruction; capturing the essential elements of security analysis and penetration testing methodologies and delivering them in a clear and concise format in a blended learning environment of lecture and hands-on practical skill development with scenario-based final examinations. SU training techniques are a perfect match for our military cyber defense workforce goals since they not only train the relevant concepts of cyber defense and its CND specialties but also in the case of Q|SA and Q|PTL courses challenge the students to apply those concepts in a "tactical" setting that an actual security analyst or penetration tester might see.
Security University's Q|SA / Q|PTL program of instruction is impressive and superior to some other training programs in several ways; one of them being the daily hands-on assessment of critical skills being taught. Another was the realistic practical final exam which included a penetration test with a final report that required some in-depth analysis of the resulting sets of data. I spent 30 post-course hours alone on analyzing the data and developing a 32 page report. That's definitely an experience you're not going to get through other training programs that teach a five day curriculum that's predominately lecture based. The Q|SA and Q|PTL courses also expose the students to a wide range of open and closed source automated tools for use in security analysis and penetration testing as well as the built-in assessment and exploitation capabilities of both Linux and Windows based operating systems. I honestly can't understand how we expect to conduct defense in depth across the GiG without our technical workforce understanding basic exploitation, which is exactly what's missing from many other approved certifications. SU equally balances this with methodology and analysis techniques rather than relying on specific toolsets since tools frequently change and are always subject to interpretation of their results.
Many leaders and managers in a resource constrained environment try to meet FISMA compliance by targeting those one-shot, many-kills certifications that are on the DoD 8570.01M chart with little regard for how relevant the training might be for certain 8570 categories. No better example can be given than the inclusion of CISSP as an IAT validating certification. Being a CISSP I can attest that it's a great certification for a security manager as it is wide and deep in several essential bodies of knowledge. But it will not enable a security technician, especially at the enclave level, to secure enterprise environments from a hands-on technical approach nor understand the threat and environment essential to effective defense in depth. Therefore it adds little value for an organization to have an IAT-III CISSP from a technical standpoint, but practically, that person can also fill other roles since CISSP covers everything from IAT-I through IAM-III. Hence, managers focus on CISSP and miss excellent training like Security University's programs.
Security University training should be a major part of any organization's information security training programs.
SHANE F. LIPTAK,
Major, USA
Cyber Defense Officer, 21st Signal Brigade
CISSP, GCIH, Q|SA, Q|PTL, MCTS, Sec+, Net+
