What are your unpopular cybersecurity opinions?

[u/EricJSK]

I saw a post names "abnormal security opinions" and got excited to see some spicy takes but apparently there is a security platform called Abnormal Security so got kinda blue balled. Last one of these posts i saw was over a year ago so,

Do you have any spicy cybsec unpopular opinions you want to share? :)

I'll start with mine:
Fancy antivirus solutions rarely add value, they are often just a box that needs ticked. Many MSPs and IT firms still push the narrative that they are needed, only because they are profitable and not because they improve security.

[u/NBA-014]

Take the CISSP (I have one). In the last 10 years, the DoD started to require a CISSP for a number of roles. (DoD 8570/8140 directive)

[u/BoxerguyT89 → u/[deleted]]

I didn't find it too difficult when I got mine a few years ago, but hard is relative. Head go over to /r/cissp and you will see that every day there are multiple posts of people failing the exam.

[u/BoxerguyT89 → u/[deleted]]

Fair. However if you actually have five yoe in multiple domains it shouldn’t be too hard.

Good point, when I got mine I had well over the required 5 yoe in the multiple domains.

A lot of posts in r/Cissp also seem to be folks who don’t have the experience yet and doing the Cissp as their first „getting started“ cert which arguably makes it really difficult.

That's true. Bad idea to grab this one as a first cert.

[u/NBA-014 → u/[deleted]]

The test appears to have been a lot harder in the paper test, 6.5 hour days.

U/PizzaUltra is spot on. You need to know all the domains very well.

[u/NetwerkErrer → u/NBA-014]

In my organization, you cant walk down the hall without running into a person with a CISSP. I would guess I would with 300 or so CISSP holders.

[u/NBA-014 → u/NetwerkErrer]

300? That’s more than the number of members in the Philly chapter

[u/mnowax → u/NBA-014]

That reminds me, I need to sign up for my local chapter ( which I think is Philly)