• village604@adultswim.fan
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 days ago

    Just start with the free CC cert from ISC2. It’s basically just an introduction to Infosec theories and terminology.

    From there you have to decide if you want to work in analytics or GRC (governance, risk, compliance). First is more tech oriented and second is more policy and documentation, although many roles combine the two.

    If you want to go the tech route, get your A+, Network+ and Security+ from CompTIA, then you can pick one of many fields like networking security, systems security, and dev security.

    For the GRC route, if you’re in the US the NIST 800-53r5 publication is a great place to start, although it can be difficult to translate their vague wording into what work needs to be done.

    • leoj@piefed.social
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      this is way more indepth and informative than I could of possibly hoped for, thank you so much - I’ll get started with CC from ISC2.

      • village604@adultswim.fan
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 day ago

        You’re welcome! I just kind of fell into an Infosec role, so I had to do a lot of catching up on my own.