TheConversation

Blog archive

Are IT certs really a measure of talent?

cybersecurity concept

In FCW's Oct. 28 story on IT certifications, a couple of readers disagreed with the contention that the credentials are the be-all, end-all to security hiring – or even necessarily the right answer.

Madwhitehatterwrote:

I'd rather see companies hire people who've been going to hacker conventions for the last decade than someone who did a 40-hour boot camp and got a brain dump. The government will stay behind when they don't have people who know the subject doing the hiring.

Amber Corrin responds:

The big problem there is recruiting the people attending hacker conventions. There may be a few talented individuals here and there who are willing to take on civil employment or working for someone else in a corporation, but by and large, you're talking about people whose very nature skews away from that type of work.

Tom Kellerman, vice president for cybersecurity at cloud security firm Trend Micro said it best at an event in October: "The U.S. has a culture of bastardizing the hacker community as a whole," he said. "If you're technically sophisticated and you know how to become a mission [yourself], why would you want a boss?"

An anonymous commenter wrote:

The only benefit of certification is for the certification providers! It takes critical finances, time and resources away from defense projects with little to no benefit in return. Experience is by far the premier indicator.

Amber Corrin responds:

But how do you measure that experience? I'm not defending certifications, merely playing devil's advocate – and reporting to you the response I got when I expressed a similar sentiment. Most commonly, certification requirements are used at least as a front-end filter in the hiring process rather than a guarantee of IT security savvy. But it's possible – maybe even likely? – that credentials end up being more than just a checked box that gets your resume past the first phase.

Posted by Amber Corrin on Nov 04, 2013 at 11:04 AM


Rising Stars

Meet 21 early-career leaders who are doing great things in federal IT.

Featured

  • SEC Chairman Jay Clayton

    SEC owns up to 2016 breach

    A key database of financial information was breached in 2016, possibly in support of insider trading, said the Securities and Exchange Commission.

  • Image from Shutterstock.com

    DOD looks to get aggressive about cloud adoption

    Defense leaders and Congress are looking to encourage more aggressive cloud policies and prod reluctant agencies to embrace experimentation and risk-taking.

  • Shutterstock / Pictofigo

    The next big thing in IT procurement

    Steve Kelman talks to the agencies that have embraced tech demos in their acquisition efforts -- and urges others in government to give it a try.

  • broken lock

    DHS bans Kaspersky from federal systems

    The Department of Homeland Security banned the Russian cybersecurity company Kaspersky Lab’s products from federal agencies in a new binding operational directive.

  • man planning layoffs

    USDA looks to cut CIOs as part of reorg

    The Department of Agriculture is looking to cut down on the number of agency CIOs in the name of efficiency and better communication across mission areas.

  • What's next for agency cyber efforts?

    Ninety days after the Trump administration's executive order, FCW sat down with agency cyber leaders to discuss what’s changing.

Reader comments

Tue, Nov 5, 2013

From a hiring perspective, perhaps certification can enhance a resume to a degree, however, the government Cyber Security Workforce certification requirements are a drain on resources. Additionally, while keeping up with security patches is important, we need to focus on persistant threats through monitoring our network baselines and inbound/outbound traffic. Certifications do not capture these principles well. We need to be more proactive in cyber security and less reactive.

Tue, Nov 5, 2013

When hiring it is hard to know a person's talent level, but Certifications at least show a basic knowledge. I guess in an ideal world you would have a talent based Cert. I know there are a lot of people who have Certs. that can't do squat with networks, servers, IA, etc. I know at one time I was a Novell CNE but I didn't have the skills to manage a network. So I know what the author is saying.

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

More from 1105 Public Sector Media Group