Entry-Level (เริ่มต้น - 0-2 ปี)
| Cert | ผู้ออก | Focus | Prereq | คุ้มค่า? |
|---|
| CompTIA Security+ (SY0-701) | CompTIA | Foundation Security ทุกโดเมน | Network+ หรือ 2 yr Exp | ⭐⭐⭐⭐⭐ (Must-have) |
| (ISC)² CC | ISC2 | Cybersecurity Fundamentals | ไม่มี | ⭐⭐⭐⭐ (ฟรี Exam จนกว่า) |
| ISACA Cybersecurity Fundamentals | ISACA | Concepts, Architecture, Risk | ไม่มี | ⭐⭐⭐ |
| GIAC GSEC | SANS/GIAC | Hands-on Security Essentials | ไม่มี | ⭐⭐⭐⭐ (Technical Depth) |
| SSCP | ISC2 | Operational Security Skills | 1 yr Exp | ⭐⭐⭐⭐ |
Network Security Focused
| Cert | Vendor | Focus |
|---|
| CCNA (200-301) | Cisco | Networking + Security Fundamentals |
| CCNP Security (SCOR 350-701 + Concentration) | Cisco | Firewall, VPN, ISE, Email/Web, Cloud |
| Palo Alto PCNSA / PCNSE | Palo Alto | Next-Gen Firewall, Panorama, Prisma |
| Fortinet NSE 4 / NSE 7 | Fortinet | FortiGate, Security Fabric |
| Check Point CCSA / CCSE | Check Point | Quantum Firewall, Management |
Mid-Level (2-5 ปี) - Specialization
- CySA+ (CompTIA) - Threat Detection, SIEM, Vuln Management, Response
- PenTest+ (CompTIA) - Penetration Testing, Vuln Assessment
- CISM (ISACA) - Security Management, Governance, Incident Management
- CISSP (ISC2) - Gold Standard สำหรับ Senior/Management (5 yr Exp)
- CCSP (ISC2/Cloud Security Alliance) - Cloud Security Architecture
- GCIH / GCFA / GNFA (GIAC) - Incident Handling, Forensics, Network Forensics
- OSCP (OffSec) - Hands-on Pen Testing (Challenging, Respected)
Advanced/Senior (5+ ปี)
- CISSP Concentrations: ISSAP (Architecture), ISSEP (Engineering), ISSMP (Management)
- CISA (ISACA) - IT Audit
- CRISC (ISACA) - Risk Management
- SABSA / TOGAF - Security Architecture Frameworks
เส้นทางแนะนำ (Recommended Paths)
- SOC/Blue Team: Security+ → CySA+ → Splunk/Elastic Cert → GCIH → CISSP
- Network Security Engineer: CCNA → CCNP Security (SCOR) → PCNSA/NSE4 → CISSP
- Cloud Security: Security+ → AWS Security Spec / AZ-500 → CCSP → CISSP
- Pen Testing/Red Team: Security+ → PenTest+ / OSCP → OSEP / OSWE → CRTO
- GRC/Management: Security+ → CISM → CISSP → CRISC / CISA
Certifications Worth It ไหม?
ใช่ แต่ไม่ใช่ Magic Bullet Certs = โปรดให้ HR/Recruiter มองเห็น + Validate Knowledge จริง ต้องมี Hands-on Skills + Portfolio + Soft Skills ควบคู่ไปด้วย
DoD 8570 / 8140 Compliance (Gov/Contractor Jobs)
- IAT Level I: Security+, CCNA Security (Retired), GSEC
- IAT Level II: CySA+, PenTest+, CCNP Security, GCIH
- IAT Level III: CISSP, CASP+, OSCP
- IAM Level II/III: CISM, CISSP, CCSP
