Looking to Give Back a Little?

CompTIA is working with Amazon on a workforce development training for employees. Amazon candidates have gone through A+ training and are preparing to sit for the exam. We would like to offer 90 minute review sessions during the month of September. Here are the details:

Tuesdays @ 11:00 a.m.
Friday @ 11:00 a.m.

Sessions will be for 90 minutes.
60 minutes for Core 1 with an instructor​
30 minutes for breakout sessions on what they learned.​

Date Time
Tuesday, September 7th 11:00 a.m. - 12:30 p.m.
Friday, September 10th 11:00 a.m. - 12:30 p.m.
Tuesday, September 14th 11:00 a.m. - 12:30 p.m.
Friday, September 17th 11:00 a.m. - 12:30 p.m.
Tuesday, September 21st 11:00 a.m. - 12:30 p.m.
Friday, September 24th 11:00 a.m. - 12:30 p.m.
A+ Celebration Week September 27th - October 1st

If anyone is interested in participating and can lead one or more of the sessions reach out to me directly and I can put you in contact with the program lead.

Thank you !!

Xceed Academy is seeking a CySA+ instructor in KSA

Xceed Academy, a consulting and training organization, is urgently looking for an instructor for the CompTIA Cybersecurity Analyst (CySA+)

The training will be delivered in Riyadh and Dammam, Saudi Arabia (KSA)

The sessions will be physical classroom-based (for now) starting from September 5th, 2021.

Please reach out by email at [email protected] or by phone at +971 502 464 984

CompTIA CASP+ (CAS-004) Pre-Launch Partner Webinar

September 8th for an early look at the new CASP+ certification exam

In this 30-minute webinar, you will:
Discover the relevant skills required to effectively design, implement and manage cybersecurity solutions on complex enterprise networks.
Review updates to the new objectives.
Learn what resources and Official CompTIA learning solutions will be available at launch.
Do not miss the opportunity to learn more about the upcoming CompTIA CASP+ (CAS-004) exam launching October 6, 2021.

Registration Link: Registration Link

But is there a real labor shortage?

So I was reading a post on Reddit (here) and it sort of struck a cord with me. I won't repeat the post here - you get to go read it for yourself.

But at the risk of spoiler alert, the author's basic premise is that business leaders are simply making these statements:
  • Stop putting all this security stuff in place that makes it harder and harder for me to do business
  • Make security more friendly to my budget and we'll talk about it.
  • ...oh but make sure to keep our collective butts out of hot water and get us compliant.
So, let me ask, is there really a cyber talent shortage, based on what we see coming through our classrooms? I mean, there are degrees all over the place and kids are enrolling in droves, but are we actually getting the rich cyber talent that we need to form solid blue teams and be able to defend our networks from come what may?

We all know that cybersecurity is the new sexy. It's the bright shiny buzz word surrounded by pictures of people in business attire, in darkened data centers, analyzing the content displayed on a couple of 27" displays with other pictures of some person in a hoodie and Guy Fawkes mask displayed as "the enemy". Little do these star-struck candidates know that if they actually get into a cyber role within five years after graduation (despite what some admissions rep may say), it's going to be filled with menial tasks like filling out hundreds of pages of documentation for compliance and insurance sake, answering tickets for why the password reset tool isn't working, and maybe pouring over the outputs correlated by a SIEM that shows little more than background noise. But hey, sexy things sell, so we have students (which is good for us...but...).

And as a side rant, just yesterday, US President Biden had some kind of conference with cyber leaders where the output seemed to be (at least from just reading the headlines) was, "Hey NIST, we need a new Framework". Why? What's wrong with the old framework? Seems it was just fine, but since we're still seeing cyber attacks (T-Mobile anyone), somehow a new framework would help tamp down all these new cyber threats.

I didn't think so, either.

I think 3_toad_Grizzly has a point. I personally don't see a real cyber shortage. I see a "care" shortage. I still see business leaders out there that don't care about cyber until it bites them in the posterior region and threatens to sap all their corporate profits that they reluctantly start hiring real cyber analysts into their organizations, rather than just the casual relationship with an MSP to solve a specific problem or, more likely, overcome a compliance/insurance hurdle.

Anyway, it seems CIN is a bit quiet this week, so I figure, time to get a good discussion going and earn a few more achievements and XP. Come one, come all...it's a good old fashioned RickRant! ;)

/r

ACI Learning openings for full time and contract CompTIA and Cyber Instructors that teach A+, Net+, Sec+

My name is Jennifer Strobl, I am the Director of Program Operations for ACI Learning. We are an IT training company offering on-campus as well as virtual learning. We are looking for contract virtual CompTIA instructors, or an instructor that might be interested in teaching local for one of our 5 campuses in Dallas TX, San Antonio TX, Jacksonville FL, Denver Colorado or Colorado Springs Colorado. I see you are in San Antonio.

If you are interested in teaching A+, Net+ or Sec+ for us please reach out for more information.

My best,
Jennifer Strobl
7209993016
Please email [email protected] or go to https://acilearning.applytojob.com/ to apply.

Knowledge in CompTIA Cloud+ is valuable for CSA CCSK

I would like share with CINers about the news for whom is preparing to take CCSK (CSA) v4 Exam. I have just passed the CCSK v4 Exam, I can inherit a lot of knowledge in CompTIA Cloud+ to prepare for CCSK exam, beside that CompTIA Server+ is also valuable reference.

CIN TTT Series - Network+ N10-008

Join the CompTIA Instructor Network as we welcome Sam Berumen who will lead our Network+ N10-008 TTT series. The series will consist of ten sessions covering the Network+ exam domains. Sam will teach the key networking concepts covered on the exam as well as hands-on activities with key technology tools used by networking professionals.

We will also discuss instructional strategy for presenting the concepts to students and best practices for implementing a Network+ course.

Network+ ensures an IT professional has the knowledge and skills to:
  • Design and implement functional networks
  • Configure, manage, and maintain essential network devices
  • Use devices such as switches and routers to segment network traffic and create resilient networks
  • Identify benefits and drawbacks of existing network configurations
  • Implement network security, standards, and protocols
  • Troubleshoot network problems
  • Support the creation of virtualized networks
What: 10-session webinar series
When: Tuesday, Sept. 14, 2021
Where: ON24
Registration (Be sure to select all of the sessions)

CIN Webinar Banners-TTT ON24.pngNetworkPlus Logo(1).png

CINer’s Prayer

This was from the last session of the Cloud+ TTTT.

CINer’s Prayer

Oh mighty CompTIA, I come to you on bended knee to let me join CIN and be counted among the true CINers! I pray for strength to resist the temptation of putting off redeeming my free exam vouchers or my code for the free content. I also repent from badgering poor Stephen S. about exam vouchers and course content.

I will seek further knowledge, wisdom, and enlightenment by attending Train-the-Trainers, Seek Peaks, and Deep Dives. I will remember to click on the chat icon and do the survey at the end of the webinar. I ask for your forgiveness for making pithy and clever comments in the webinar chats. I will make the pilgrimage to take my certification exams including the cleansing of the unknown wilderness of beta exams.

Amen

MTCS - Multi-Tier Cloud Security Standard for Singapore

The Multi-Tier Cloud Security (MTCS) Standard for Singapore was prepared under the direction of the Information Technology Standards Committee (ITSC) of the Infocomm Development Authority of Singapore (IDA). The ITSC promotes and facilitates national programs to standardize IT and communications, and Singapore's participation in international standardization activities.

The purpose of the MTCS is to provide:
  • A common standard that cloud service providers (CSPs) can apply to address customer concerns about the security and confidentiality of data in the cloud, and the impact on businesses of using cloud services.
  • Verifiable operational transparency and visibility into risks to the customer when they use cloud services.
The MTCS builds upon recognized international standards such as ISO/IEC 27001, and covers such areas as data retention, data sovereignty, data portability, liability, availability, business continuity, disaster recovery, and incident management. It also includes a mechanism for customers to benchmark and rank the capabilities of CSPs against a set of minimum baseline security requirements.

MTCS is the first cloud security standard with different levels of security, so certified CSPs can specify which levels they offer. MTCS includes a total of 535 controls, covering basic security in Level 1, more stringent governance and tenancy controls in Level 2, and reliability and resiliency for high-impact information systems in Level 3.

AWS, Azure, GCP is now Level 3.

More information: https://www.imda.gov.sg/news-and-ev...-security-mtcs-standard-launched-in-singapore

Regarding Exam question wording

This question is directed to @Rick Butler , but I welcome any responses.

With regards to the question asked in session 9 of the Cloud+ TTT, you mentioned the concept of identifying what the question is actually asking, as opposed to what the student "Thinks" the question is asking.

"You have resolved a user’s issue with connecting to their Linux IaaS Instance and implemented the solution. You return to the helpdesk ticket queue and get ready to work on the next ticket. What is the next troubleshooting step you skipped?"

Is there another meaning to 'resolved' that I am unaware of? I don't think it needs interpretation, past-tense of "Resolve: To find a solution to; solve: ie. resolved the problem."

If the issue was not verified, it cannot have been successfully resolved. I don't know any other way to read that statement. Please help! :)

CIN Sneak Peek - PenTest+ PT0-002

We are back with the next version of PenTest+!!

Join us on Thursday, September 9th for a sneak peak of the CompTIA PenTest+ PT0-002 exam. During this two-hour session, we will review the updated PenTest+ exam objectives to get a perspective of the latest cybersecurity concepts from the "red team" point of view

Get techy with us as we welcome Lee McWhorter who will share his insights from an industry cybersecurity pro and instructor experience. Join the conversation as we discuss various types of scenarios and ways to prepare students for the exam when it is released later in 2021.

What: two-hour webinar looking at the new certification
When: Thursday, September 9th 10:00 a.m. CST
Where: ON24
Who: Lee McWhorter
Registration: https://event.on24.com/wcc/r/3355480/5F7E3801FD66614972550A4B56D43A6B

CIN Sneak Peek Webinar SM.pngPenTest  Logo.png

Partner Summit Online 2021 - On-demand

Hopefully everyone was able to join us for a great Partner Summit this year! The session were really good and great presenters. If you missed it, no worries. Be sure to check out the sessions at your leisure on-demand! Just click the link below and start enjoying!

Partner Summit 2021 on-demand

Don't forget to let us know your favorite session!

1628804809620.png

Filter