<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>InfoSecMinds &#187; Training &amp; Certification</title>
	<atom:link href="http://infosecminds.com/category/training-certification/feed/" rel="self" type="application/rss+xml" />
	<link>http://infosecminds.com</link>
	<description>For like-minded people</description>
	<lastBuildDate>Sat, 15 Jan 2011 09:21:13 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
		<item>
		<title>Certification, Its Value and Credibility</title>
		<link>http://infosecminds.com/2008/07/30/certification-its-value-and-credibility/</link>
		<comments>http://infosecminds.com/2008/07/30/certification-its-value-and-credibility/#comments</comments>
		<pubDate>Wed, 30 Jul 2008 07:19:05 +0000</pubDate>
		<dc:creator>Vinod Puthuseeri</dc:creator>
				<category><![CDATA[Training & Certification]]></category>
		<category><![CDATA[Certifications]]></category>
		<category><![CDATA[Standards]]></category>
		<category><![CDATA[Training]]></category>

		<guid isPermaLink="false">http://vputhuseeri.wordpress.com/?p=31</guid>
		<description><![CDATA[Speaking about industry standard, educational and organizational certifications and understand if it is actually loosing its charm. &#8220;Organization&#8217;s are gearing up to be certified on various standards; individuals are busy certifying themselves against product and general certifications to enhance their opportunities in getting better pay packs (or could also be to enhance their skill sets).&#8221; [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align:justify;">Speaking about industry standard, educational and organizational certifications and understand if it is actually loosing its charm. <em>&#8220;Organization&#8217;s are gearing up to be certified on various standards; individuals are busy certifying themselves against product and general certifications to enhance their opportunities in getting better pay packs (or could also be to enhance their skill sets).&#8221;</em></p>
<p style="text-align:justify;">Looking at the later, that individuals are busy completing their certifications in looking for better opportunities or enhancing their skill sets. <em>The main trigger for this is organization and/or recruiters do their first level of screening by looking at certifications an individual has completed.</em> Organizations realize the facts when the candidate appears for his/her personnel interview.</p>
<p style="text-align:justify;"><span id="more-31"></span></p>
<p style="text-align:justify;">It has two sides, wherein I was also a member of the interview panel many times and I have noticed that some of them really opted for certifications to enhance their skills and some to barely put the certifications on their resumes. So the question is how do they get away by clearing their certification exams.</p>
<p style="text-align:justify;">There are many players in the industry giving away trainings on different subjects and making their money. All they need to ensure is that the candidate has attended their course which would vary from a 3 day course to 5 and 10 days. Organization&#8217;s send in their employees to certification courses and employees treat the same as a paid vacation.</p>
<p style="text-align:justify;">The training institutes are not effectively monitoring about how those candidates would use the skills that they have learnt in the training and apply it effectively in their organization. Their responsibility ends by providing the training and conducting an exam and in most of the cases the exams are becoming more and more liberal for the participants. The training institute would like to make it liberal because some of the participants pay this huge amount from their own pockets and in-turn they would also like to showcase the passing rates which would increase their business and the credibility of the trainer.</p>
<p style="text-align:justify;"><strong>Organizations should:</strong></p>
<ol>
<li><strong>Ensure that every employee going through training should be able to come back to the organization and spread his knowledge to his team. This could be done by preparing a document on how it would help the organization or by conducting internal trainings to their team mates</strong></li>
<li><strong>Include training outcomes as part of the employee&#8217;s appraisals.</strong></li>
<li><strong>Not impart trainings to their employees to just catch up with their training budgets</strong></li>
<li><strong>Ensure that they can a valid feedback from the trainers on the performance of the participant and this should be used as a baseline to decide if this participant can be send for further trainings.</strong></li>
</ol>
<p style="text-align:justify;"><strong>Training institute&#8217;s should:</strong></p>
<ol>
<li><strong>Look beyond training and certification and ensure that the organization is benefitted with the training given to their employees, by having a feedback given to the organization on the performance of the employee during the training.</strong></li>
<li><strong>Institute can also get a feedback from the organization based on their performance related to the training they have attended. Though this should be triggered by the training institute and for sure will increase their credibility.</strong></li>
<li><strong>Have a team to randomly visit venues were examinations are conducted to check the credibility of the tasks carried out.</strong></li>
<li><strong>Have more transparency to the participants in exam paper collection and valuation. Try and make the same more pro-metric type of exams or scenario based rather than just marking on a sheet of paper that can be manipulated.</strong></li>
</ol>
<p style="text-align:justify;">Now coming to organizational certifications there are two categories.</p>
<ol>
<li><em>Organizations who would like to improve their processes and have a commitment to maintain the same</em></li>
<li><em>Organizations that look just for certifications to showcase the same to their clients and win contracts</em></li>
</ol>
<p style="text-align:justify;">The majority of the organizations today fall into the second category. Organizations look for external consultants who can just come over, do the minimum required tasks to show the auditors that there is an effort put and get the organization certified. It is not to blame the organizations completely rather have the consultants blamed cause their primary job would be to ensure that the organization has implemented the necessary processes and is practicing the same. Consultants are supposed to be advisors by analyzing the business and recommending best practices for the organization.</p>
<p style="text-align:justify;">Auditors also help organizations achieve certifications by just meeting the minimum requirements as mentioned in any standard and the easiest escape out of any non-conformance is to show a roadmap of implementation which can be audited in the following surveillance audits. Auditors who are not supposed to be consulting and auditing are approaching organizations with certain checklists which will help the organization in complying to certain requirements and be ready for the certification audit. The auditors will then wear the auditors cap and audit the organizations and certify.</p>
<p style="text-align:justify;">Those organizations that fall into category 2 will take this offer as their main objective is to showcase a certificate that would bring them more clients or satisfy the existing clients. Every consultant or in-house representative of organization preach the benefits of organizational certification to their peers and one of the benefits that always comes up is that certification would give the organization an competitive edge is a <strong>&#8220;Badge of honor&#8221;. So why not wear it&#8230;!!!!</strong></p>
<p style="text-align:justify;">External drivers</p>
<p style="text-align:justify;">The external drivers for organization to get certified against industry standards could be their clients or regulatory requirements. Where if the driver is the regulatory requirement, irrelevant of an organization is certified against any industry standards, auditors will verify if the actual requirements are present/implemented/practiced in an organization after which the process of validating them is completed.</p>
<p style="text-align:justify;">In the same manner if the external drivers are the clients of an organization, those clients should make a visit to the vendors premises to physically check if the requirements as mentioned in the industry standard (against which the organization is certified) has been implemented and practiced and that they have collected enough evidence, after which they should approve to provide business to that organization.</p>
<p style="text-align:justify;">These are my views which is out of some discussions and personnel experience. I would like to know what others feel of the same. So please let us all know about your views.</p>
]]></content:encoded>
			<wfw:commentRss>http://infosecminds.com/2008/07/30/certification-its-value-and-credibility/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

