TheConversation

Blog archive

Are IT certs really a measure of talent?

cybersecurity concept

In FCW's Oct. 28 story on IT certifications, a couple of readers disagreed with the contention that the credentials are the be-all, end-all to security hiring – or even necessarily the right answer.

Madwhitehatterwrote:

I'd rather see companies hire people who've been going to hacker conventions for the last decade than someone who did a 40-hour boot camp and got a brain dump. The government will stay behind when they don't have people who know the subject doing the hiring.

Amber Corrin responds:

The big problem there is recruiting the people attending hacker conventions. There may be a few talented individuals here and there who are willing to take on civil employment or working for someone else in a corporation, but by and large, you're talking about people whose very nature skews away from that type of work.

Tom Kellerman, vice president for cybersecurity at cloud security firm Trend Micro said it best at an event in October: "The U.S. has a culture of bastardizing the hacker community as a whole," he said. "If you're technically sophisticated and you know how to become a mission [yourself], why would you want a boss?"

An anonymous commenter wrote:

The only benefit of certification is for the certification providers! It takes critical finances, time and resources away from defense projects with little to no benefit in return. Experience is by far the premier indicator.

Amber Corrin responds:

But how do you measure that experience? I'm not defending certifications, merely playing devil's advocate – and reporting to you the response I got when I expressed a similar sentiment. Most commonly, certification requirements are used at least as a front-end filter in the hiring process rather than a guarantee of IT security savvy. But it's possible – maybe even likely? – that credentials end up being more than just a checked box that gets your resume past the first phase.

Posted by Amber Corrin on Nov 04, 2013 at 11:04 AM


The Fed 100

Save the date for 28th annual Federal 100 Awards Gala.

Featured

  • Social network, census

    5 predictions for federal IT in 2017

    As the Trump team takes control, here's what the tech community can expect.

  • Rep. Gerald Connolly

    Connolly warns on workforce changes

    The ranking member of the House Oversight Committee's Government Operations panel warns that Congress will look to legislate changes to the federal workforce.

  • President Donald J. Trump delivers his inaugural address

    How will Trump lead on tech?

    The businessman turned reality star turned U.S. president clearly has mastered Twitter, but what will his administration mean for broader technology issues?

  • Login.gov moving ahead

    The bid to establish a single login for accessing government services is moving again on the last full day of the Obama presidency.

  • Shutterstock image (by Jirsak): customer care, relationship management, and leadership concept.

    Obama wraps up security clearance reforms

    In a last-minute executive order, President Obama institutes structural reforms to the security clearance process designed to create a more unified system across government agencies.

  • Shutterstock image: breached lock.

    What cyber can learn from counterterrorism

    The U.S. has to look at its experience in developing post-9/11 counterterrorism policies to inform efforts to formalize cybersecurity policies, says a senior official.

Reader comments

Tue, Nov 5, 2013

From a hiring perspective, perhaps certification can enhance a resume to a degree, however, the government Cyber Security Workforce certification requirements are a drain on resources. Additionally, while keeping up with security patches is important, we need to focus on persistant threats through monitoring our network baselines and inbound/outbound traffic. Certifications do not capture these principles well. We need to be more proactive in cyber security and less reactive.

Tue, Nov 5, 2013

When hiring it is hard to know a person's talent level, but Certifications at least show a basic knowledge. I guess in an ideal world you would have a talent based Cert. I know there are a lot of people who have Certs. that can't do squat with networks, servers, IA, etc. I know at one time I was a Novell CNE but I didn't have the skills to manage a network. So I know what the author is saying.

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

More from 1105 Public Sector Media Group