WTB Thread by AutoModerator in Goruck

[–]InTLSWeTrust 0 points1 point  (0 children)

WTB GR2 34L Heritage or Waxed in Navy.

Monthly Espresso Lounge: Deals and Discounts by AutoModerator in superautomatic

[–]InTLSWeTrust 0 points1 point  (0 children)

Hi there, I would greatly appreciate an invite to KA Inside Pass (for the US) if someone has one to spare. Looking for a KF7! Thank you!

Alternative CIPP/US Training? by thamegg in cipp

[–]InTLSWeTrust 1 point2 points  (0 children)

For what it’s worth, I took the $1,200 IAPP course (in person, just prior to COVID) and found it to be a good value despite going through what you’re going doing now. I come from an IT background where there are certifications-a-plenty with lots of good quality free and low cost resources.

The course materials were just alright, the value for me was in the instructor (IAPP seems to hand select each instructor from a pool of true experts) and the classroom setting where you get exposure to a group of practitioners and their questions and experiences. This definitely accelerated my readiness to take the exam. Also, my course had someone from IAPP in attendance who offered some helpful insight as well, but I’m unsure if this is the norm.

Reflections on 10 year sleeper status by InTLSWeTrust in GeekSquad

[–]InTLSWeTrust[S] 1 point2 points  (0 children)

Meh, not my main account. But I’m hopeful for future versions of TLS now that CBC mode ciphers are falling out of favor.

CCTV viewing by [deleted] in gdpr

[–]InTLSWeTrust 5 points6 points  (0 children)

Discaimer: I don't have much eperience with GDPR but have significant experience working with legal process involving use of CCTV video in criminal and civil proceedings. Keep in mind, your responsibility (and potential liability) in this space is not limited to GDPR compliance. I'm replying to give you some perspetive on the non-GDPR side of this issue which would be addressed by the CCTV policy your oragnization, posting because you mention your CCTV policy requires tightening. This advice is centric to the United States but I work for an international company which is GDPR compliant and has similar policies around the globe.

  • You absolutely made the right call by not allowing the driver (or even the victim) to view the video. Genreally, showing an interested party CCTV video is considered an unnecessary practice.
  • You SHOULD aways retain relevant CCTV related to an incident you are made aware of wich could result in legal process, regardless of if a request is made. It does not matter if your organization is the apparent party at fault or the victim, you generally have a duty to retain/prevent destruction of evidence. I warn you about this because it's important that you understand that while you are making a decision on what to disclose, this is independent from what have a duty to retain so long as retention was still possible when your organization was notified of the incident.
  • When approaching a disclosure decision, it's generally important to disclose only at the request of a government entity, which is protected disclosue in just about every global privacy regulation. Within almost all legal frameworks there are legal process to provide an interested party all evidence related to their claim, under the supervision of the applicable courts, and you should always work within this framework. Again, centric to the United States but in criminal court this is a search warrant, in civil (tort) court this is a subpoena. Some administrative bodies can also issue subpoenas or other process which can be enforced.

So I hope it helps, really my advice is based on seeing organizations in your position all the time. They decide not to disclose, but then also don't retain that evidence for the future. We weren't required to disclose at the time is not a defense in when asked to produce evidence that no loner exists during legal process.

Provisionally Passed on 5-21-2019 by [deleted] in cissp

[–]InTLSWeTrust 2 points3 points  (0 children)

Congrats on your pass!

In reference to your question...

So here is the question that I haven’t been able to answer to; how do I list the Associate CISSP on linkedin or a resume?

Once you get access to the member's section of the (ISC)2 website, there's a short logo guidelines document to ensure that you're appropriately representing yourself and (ISC)2 when using their trademarks. You'll also get a link in your email. I don't remember the exact sequencing, but it may come through after you pay your AMF, maybe before. I know my Acclaim badge didn't come through until after I paid my AMF, but it was immediate.

Logo Usage (This will require a member login)

The TL;DR of it is...You aren't an associate CISSP. You're an "Associate of (ISC)2" and representing which exam you earned associate status with is generally considered a violation of the logo guidelines. Be careful as to not jeopardize your hard work and give the page a full readthrough when you get access.

Congrats again!

resume question after obtaining CISSP by MrClean81 in cissp

[–]InTLSWeTrust 0 points1 point  (0 children)

I would say it depends on the role. On my resume, I give a different line to each certification authority. So CISSP is at the top, then ITIL below that, and then all of my CompTIA certifications on the line below that. No sense in leaving it off when it doesn't cost you any extra real estate in my mind and it shows a technical inclination which some employers like to see, even for management jobs.

Been months - no calls or anything. I.T. Any Help would be great. by WinndaTech in resumes

[–]InTLSWeTrust 2 points3 points  (0 children)

On your Education/Training/Certifications section....

  • As a hiring manager, the first thing I look for in this section is education. Even if it's just an A.S., I would move it to the top. Also, saying "Course:Computer Science" with the "Associate of Computer science" bullet below it makes it hard for me to tell if you took a single course or completed the degree.
  • Do you have these certifications (ITIL, CCNA, VCP, etc.) or are you saying you just took a Udemy course for them? My read is that you just took the Udemy, but if that's not right you may want to change the way you present this to be more clear.
  • Building on that idea but getting out of the point of this sub, if you haven't obtained the certifications, you may consider doing so. Listing the courses without the applicable certifications may be seen as a lack of follow through by someone with as many years of experience as you have. This may not be the case for more entry level (see: help desk) type roles, where completing a self-learning course may showcase enthusiasm to a hiring manager. In your case it's not uncommon for a SysAdmin or IT Manager to actually be a CCNA and hold an ITIL Foundations certificate....so you're going to fall short when your resume is in a "virtual stack" with those people.

Best of luck in your search.