• The U.S. job market has almost 600,000 openings requesting cybersecurity-related skills. 
• Employers are struggling to fill these openings due to a general cyber-skill shortage, with many openings remaining vacant each year. 
• When evaluating prospective information-security candidates, employers should look for certifications as an important measure of excellence and commitment to quality.
• This article is for business owners looking to hire cybersecurity experts, or for individuals interested in pursuing a cybersecurity career. 

Cybersecurity is one of the most crucial areas for ensuring a business’s success and longevity. With cyberattacks growing in sophistication, it’s essential for business owners to protect their companies by hiring qualified cybersecurity experts to manage this aspect of their business. The best candidates will have a certification in information security and cybersecurity. This guide breaks down the top certifications and other guidance you’ll need to make the right hire for your company. It’s also a great primer for individuals who are embarking on a cybersecurity career.

Best information security and cybersecurity certifications

When evaluating prospective InfoSec candidates, employers frequently look to certification as an important measure of excellence and commitment to quality. We examined five InfoSec certifications we consider to be leaders in the field of information security today.

This year’s list includes entry-level credentials, such as Security+, as well as more advanced certifications, like Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) and Certified Information Systems Auditor (CISA). According to CyberSeek, more employers are seeking CISA, CISM and CISSP certification holders than there are credential holders, which makes these credentials a welcome addition to any certification portfolio.

Absent from our list of the top five is SANS GIAC Security Essentials (GSEC). Although this certification is still a very worthy credential, the job board numbers for CISA were so solid that it merited a spot in the top five. Farther down in this guide, we offer some additional certification options because the field of information security is both wide and varied.

1. CEH: Certified Ethical Hacker

The CEH (ANSI) certification is an intermediate-level credential offered by the International Council of E-Commerce Consultants (EC-Council). It’s a must-have for IT professionals who are pursuing careers in white hat hacking and certifies their competence in the five phases of ethical hacking: reconnaissance, enumeration, gaining of access, access maintenance and track covering. 

CEH credential holders possess skills and knowledge of hacking practices in areas such as footprinting and reconnaissance, network scanning, enumeration, system hacking, Trojans, worms and viruses, sniffers, denial-of-service attacks, social engineering, session hijacking, web server hacking, wireless networks and web applications, SQL injection, cryptography, penetration testing, IDS evasion, firewalls and honeypots. CEH V11 provides a remapping of the course to the NIST/NICE framework’s Protect and Defend (PR) job role category, as well as an additional focus on emerging threats in cloud, OT and IT security, such as fileless malware.

To obtain a CEH (ANSI) certification, candidates must pass one exam. A comprehensive five-day CEH training course is recommended, with the test presented at the course’s conclusion. Candidates may self-study for the test but must submit documentation of at least two years of work experience in information security with employer verification. Self-study candidates must also pay an additional $100 application fee. Education may be substituted for experience, but this is evaluated on a case-by-case basis. Candidates who complete any EC-Council-approved training (including with the iClass platform, academic institutions or an accredited training center) do not need to submit an application prior to attempting the exam.

Because technology in the field of hacking changes almost daily, CEH credential holders are required to obtain 120 continuing-education credits for each three-year cycle.

Once a candidate obtains the CEH (ANSI) designation, a logical progression on the EC-Council certification ladder is the CEH (Practical) credential. The CEH (Practical) designation targets the application of CEH skills to real-world security audit challenges and related scenarios. To obtain the credential, candidates must pass a rigorous six-hour practical examination. Conducted on live virtual machines, candidates are presented 20 scenarios with questions designed to validate a candidate’s ability to perform tasks such as vulnerability analysis, identification of threat vectors, web app and system hacking, OS detection, network scanning, packet sniffing, steganography and virus identification. Candidates who pass both the CEH (ANSI) and the CEH (Practical) exams earn the CEH (Master) designation.

CEH facts and figures

Certified Ethical Hacker (CEH) training

While EC-Council offers both instructor-led and online training for its CEH certification, IT professionals have plenty of other options for self-study materials, including video training, practice exams and books.

Pluralsight currently offers an ethical-hacking learning path geared toward the 312-50 exam. With a monthly subscription, you get access to all of these courses, plus everything else in Pluralsight’s training library. Through Pluralsight’s learning path, students can prepare for all of the domains covered in the CEH exam.  

CyberVista offers a practice test for the CEH 312-50 certification that includes several sets of exam-like questions, custom quizzes, flash cards and more. An test prep subscription for 180 days costs $149 and gives candidates access to online study materials, as well as the ability to obtain the materials for offline study. Backed by its “pass guarantee,” CyberVista is so confident its practice test will prepare you for the CEH test that the company will refund its VCE test costs if you don’t pass.

FYI: Besides certifications in information security and cybersecurity, the best IT certifications cover areas such as disaster recovery, virtualization and telecommunications.

2. CISM: Certified Information Security Manager

The CISM certification is a top credential for IT professionals who are responsible for managing, developing and overseeing information security systems in enterprise-level applications or for developing organizational security best practices. The CISM credential was introduced to security professionals in 2003 by the Information Systems Audit and Control Association (ISACA).

ISACA’s organizational goals are specifically geared toward IT professionals who are interested in the highest-quality standards with respect to the auditing, control and security of information systems. The CISM credential targets the needs of IT security professionals with enterprise-level security management responsibilities. Credential holders possess advanced and proven skills in security risk management, program development and management, governance, and incident management and response.

Holders of the CISM credential, which is designed for experienced security professionals, must agree to ISACA’s code of ethics, pass a comprehensive examination, possess at least five years of experience in information security management, comply with the organization’s continuing education policy and submit a written application. Some combinations of education and experience may be substituted for the full experience requirement.

The CISM credential is valid for three years, and credential holders must pay an annual maintenance fee of $45 (ISACA members) or $85 (nonmembers). Credential holders are also required to obtain a minimum of 120 continuing professional education (CPE) credits over the three-year term to maintain the credential. At least 20 CPE credits must be earned every year.

CISM facts and figures

Other ISACA certification program elements

In addition to CISM, ISACA offers numerous certifications for those interested in information security and best practices. Other credentials worth considering include the following:

• Certified Information Systems Auditor (CISA)
• Certified in the Governance of Enterprise IT (CGEIT)
• Certified in Risk and Information Systems Control (CRISC)

The CISA designation was created for professionals working with information systems auditing, control or security and is popular enough with employers to earn it a place on the leaderboard. The CGEIT credential targets IT professionals working in enterprise IT management, governance, strategic alignment, value delivery, and risk and resource performance management. IT professionals who are seeking careers in all aspects of risk management will find that the CRISC credential nicely meets their needs.

Certified Information Security Manager (CISM) training

Pluralsight offers a CISM learning path containing five courses and 17 hours of instruction. The courses cover the domains addressed in the exam, but the learning path is aimed at the CISM job practice areas. 

CyberVista offers a CISM online training course in both live and on-demand formats. The course includes more than 16 hours of training videos, supplementary lessons, custom quizzes, practice test questions and access to experts through the instructor. As with other CyberVista courses, the CISM training course comes with a “pass guarantee.” 

Did you know?: According to CyberSeek, there are enough workers to fill only 68% of the cybersecurity job openings in the U.S. A cybersecurity certification is an important way to demonstrate the knowledge and ability to succeed in these job roles.

3. CompTIA Security+

CompTIA’s Security+ is a well-respected, vendor-neutral security certification. Security+ credential holders are recognized as possessing superior technical skills, broad knowledge and expertise in multiple security-related disciplines.

Although Security+ is an entry-level certification, the ideal candidates possess at least two years of experience working in network security and should consider first obtaining the Network+ certification. IT pros who obtain this certification have expertise in areas such as threat management, cryptography, identity management, security systems, security risk identification and mitigation, network access control, and security infrastructure. The CompTIA Security+ credential is approved by the U.S. Department of Defense to meet Directive 8140/8570.01-M requirements. In addition, the Security+ credential complies with the standards for ISO 17024.

The Security+ credential requires a single exam, currently priced at $381. (Discounts may apply to employees of CompTIA member companies and full-time students.) Training is available but not required.

IT professionals who earned the Security+ certification prior to Jan. 1, 2011, remain certified for life. Those who certify after that date must renew the certification every three years to stay current. To renew, candidates must obtain 50 continuing-education units (CEUs) or complete the CertMaster CE online course prior to the expiration of the three-year period. CEUs can be obtained by engaging in activities such as teaching, blogging, publishing articles or whitepapers, and participating in professional conferences and similar activities.

CompTIA Security+ facts and figures

CompTIA Security+ training

You’ll find several companies offering online training, instructor-led and self-study courses, practice exams and books to help you prepare for and pass the Security+ exam.

Pluralsight offers a Security+ learning path as a part of its monthly subscription plan for the latest SY0-601 exam. Split into six sections, the training series is more than 24 hours long and covers attacks, threats and vulnerabilities; architecture and design; implementation of secure solutions; operations and incident response; and governance, risk and compliance.

CyberVista offers a Security+ practice test so you can test your security knowledge before attempting the SY0-601 exam. The test comes with a 180-day access period and includes multiple sets of test questions, key concept flash cards, access to InstructorLink experts, a performance tracker and more. As with CyberVista’s other offerings, this practice test comes with a “pass guarantee.”

4. CISSP: Certified Information Systems Security Professional

CISSP is an advanced-level certification for IT pros who are serious about careers in information security. Offered by the International Information Systems Security Certification Consortium, known as (ISC)2 (pronounced “ISC squared”), this vendor-neutral credential is recognized worldwide for its standards of excellence.

CISSP credential holders are decision-makers who possess the expert knowledge and technical skills necessary to develop, guide and manage security standards, policies and procedures within their organizations. The CISSP certification continues to be highly sought after by IT professionals and is well recognized by IT organizations. It is a regular fixture on most-wanted and must-have security certification surveys.

CISSP is designed for experienced security professionals. A minimum of five years of experience in at least two of (ISC)2’s eight common body of knowledge (CBK) domains, or four years of experience in at least two of (ISC)2’s CBK domains and a college degree or an approved credential, is required for this certification. The CBK domains are security and risk management, asset security, security architecture and engineering, communications and network security, identity and access management, security assessment and testing, security operations, and software development security.

(ISC)2 also offers three CISSP concentrations targeting specific areas of interest in IT security:

• Architecture (CISSP-ISSAP)
• Engineering (CISSP-ISSEP)
• Management (CISSP-ISSMP)

Each CISSP concentration test is $599, and credential seekers must currently possess a valid CISSP.

An annual fee of $125 is required to maintain the CISSP credential. Recertification is required every three years. To recertify, candidates must earn 40 CPE credits each year, for a total of 120 CPE credits within the three-year cycle.

CISSP facts and figures 

Certified Information Systems Security Professional (CISSP) training

Given the popularity of the CISSP certification, there is no shortage of available training options. These include classroom-based training offered by (ISC)2, as well as online video courses, practice exams and books from third-party companies.

Pluralsight’s CISSP learning path includes 12 courses and 25 hours of e-learning covering the security concepts required for the certification exam. Available for a low monthly fee, the CISSP courses are part of a subscription plan that gives IT professionals access to Pluralsight’s complete library of video training courses.

When you’re ready to test your security knowledge, you can take a simulated test that mimics the format and content of the real CISSP exam. Udemy offers CISSP practice questions to help you prepare for this challenging exam.

5. CISA: Certified Information Systems Auditor

ISACA’s globally recognized CISA certification is the gold standard for IT workers seeking to practice in information security, audit control and assurance. Ideal candidates can identify and assess organizational threats and vulnerabilities, assess compliance, and provide guidance and organizational security controls. CISA-certified professionals demonstrate knowledge and skill across the CISA job practice areas of auditing, governance and management, acquisition, development and implementation, maintenance and service management, and asset protection.

To earn the CISA certification, candidates must pass one exam, submit an application, agree to the code of professional ethics, agree to the CPE requirements and agree to the organization’s information systems auditing standards. In addition, candidates must possess at least five years of experience working with information systems. Some substitutions for education and experience with auditing are permitted.

To maintain the CISA certification, candidates must earn 120 CPE credits over a three-year period, with a minimum of 20 CPE credits earned annually. Candidates must also pay an annual maintenance fee ($45 for members; $85 for nonmembers).

CISA facts and figures

Certified Information Systems Auditor (CISA) training

Training opportunities for the CISA certification are plentiful. Udemy offers more than 160 CISA-related courses, lectures, practice exams, question sets and more. On Pluralsight, you’ll find 12 courses with 27 hours of information systems auditor training covering all CISA job practice domains for the CISA job practice areas.

Beyond the top 5: More cybersecurity certifications

In addition to these must-have credentials, many other certifications are available to fit the career needs of any IT professional interested in information security. Business owners should consider employing workers with these credentials as well.

• The SANS GIAC Security Essentials (GSEC) certification remains an excellent entry-level credential for IT professionals seeking to demonstrate that they not only understand information security terminology and concepts but also possess the skills and technical expertise necessary to occupy “hands-on” security roles.
• If you find incident response and investigation intriguing, check out the Logical Operations CyberSec First Responder (CFR) certification. This ANSI-accredited and U.S. DoD-8570-compliant credential recognizes security professionals who can design secure IT environments, perform threat analysis, and respond appropriately and effectively to cyberattacks. Logical Operations also offers other certifications, including Master Mobile Application Developer (MMAD), Certified Virtualization Professional (CVP), Cyber Secure Coder and CloudMASTER.
• The associate-level Cisco Certified CyberOps Associate certification is aimed at analysts in security operations centers at large companies and organizations. Candidates who qualify through Cisco’s global scholarship program may receive free training, mentoring and testing to help them achieve a range of entry-level to expert certifications that the company offers. CompTIA Cybersecurity Analyst (CySA+), which launched in 2017, is a vendor-neutral certification designed for professionals with three to four years of security and behavioral analytics experience.
• The Identity Management Institute offers several credentials for identity and access management, data protection, identity protection, identity governance and more. The International Association of Privacy Professionals (IAPP), which focuses on privacy, has a small but growing number of certifications as well.
• The SECO-Institute, in cooperation with the Security Academy Netherlands and APMG, is behind the Cyber Security & Governance Certification Program; SECO-Institute certifications aren’t well known in the United States, but their popularity is growing. 
• It also may be worth your time to browse the Chartered Institute of Information Security accreditations, the U.K. equivalent of the U.S. DoD 8570 certifications and the corresponding 8140 framework.

Also, consider these five entry-level cybersecurity certifications for more options.

Tip: Before you decide to purchase training for a certification or an test voucher, see if your employer will cover the cost. Employers may cover all or part of the cost if you have a continuing education or training allowance, or if the certification is in line with your current or potential job duties.

Information security and cybersecurity jobs

According to CyberSeek, the number of cybersecurity job openings in the U.S. stands at almost 598,000, with about 1.05 million cybersecurity professionals employed in today’s workforce. Projections continue to be robust: The U.S. Bureau of Labor Statistics expects 33% growth in information security analyst positions between 2020 and 2030; in comparison, the average rate of growth for all occupations is about 8%.

Security-related job roles include information security specialist, security analyst, network security administrator, system administrator (with security as a responsibility) and security engineer, as well as specialized roles, like malware engineer, intrusion analyst and penetration tester.

Average salaries for information security specialists and security engineers – two of the most common job roles – vary depending on the source. For example, SimplyHired reports about $74,000 for specialist positions, whereas Glassdoor‘s national average is about $108,000. For security engineers, SimplyHired reports almost $112,000, while Glassdoor’s average is more than $111,000, with salaries on the high end reported at $261,000. Note that these numbers frequently change as the sources regularly update their data. [Meet the man who kept Microsoft safe and secure for more than a decade.]

Our informal job board survey from April 2022 reports the number of job posts nationwide in which our featured certifications were mentioned on a given day. This should supply you an idea of the relative popularity of each certification.

Job board search results (in alphabetical order by cybersecurity certification)

Did you know?: Cybersecurity matters even when you’re traveling. Find out how to keep your computer secure when you’re on the road for business or pleasure.

The importance of hiring information security and cybersecurity professionals

According to Risk Based Security‘s 2021 Year End Data Breach Quickview Report, there were 4,145 publicly disclosed breaches throughout 2021, containing over 22 billion records. This is the second-highest number of breached records, after an all-time high the year before. The U.S. was particularly affected, with the number of breaches increasing 10% compared with the previous year. More than 80% of the records exposed throughout 2021 were due to human error, highlighting an ever-increasing need for cybersecurity education, as well as for highly skilled and trained cybersecurity professionals. [Learn how to recover from a data breach.]

If you’re serious about advancing your career in the IT field and are interested in specializing in security, certification is a great choice. It’s an effective way to validate your skills and show a current or prospective employer that you’re qualified and properly trained. If you’re a business owner, hiring certified professionals and skilled IT managers can help prevent cyberattacks and provide confidence that your company’s security is in the right hands. In the meantime, review our quick cybersecurity tips to Excellerate your company’s protection.

Jeremy Bender contributed to the writing and research in this article.

More than 20 years after Linus Torvalds developed Linux, the operating system remains a force in the computing industry. While Linux is not widely used on desktops (making up just over 2.4% of the overall desktop operating system market share in January 2019, according to NetMarketShare), it is extraordinarily strong on the web server side, where it enjoys a market share of almost 54%.

IT professionals invest considerable time learning about server computing for everything from installation, configuration, maintenance and virtualization to application support and security. This also means that many IT professionals are working with and around Linux operating systems daily, often alongside Windows and various UNIX OS brands as well.

The best of the Linux certifications vie for considerable mindshare among IT professionals and present an interesting mix of distribution- or brand-agnostic credentials alongside some pretty formidable vendor-specific credentials. There are multiple well-elaborated certification ladders available to those interested in learning, using, and mastering the Linux operating system environment and all the many bells and whistles it supports.

The results of a job search we conducted on several popular job posting sites show which Linux certifications employers are looking for when hiring new employees. While results vary from day to day (and job board to job board), this table reflects those Linux-related certifications that employers were seeking in the U.S.

Job Board Survey Results (in alphabetical order, by certification)

We found that for nearly every certification category listed above, the number of national jobs postings mentioning that certification has increased, in some cases substantially, since we surveyed the same job sites a year ago. Linux system administrators and engineers can expect average earnings in the low $70s and upward, depending on the job role. PayScale lists $70,194 as the average salary for Linux system administrators ($52,000/low and $101,000/high). Glassdoor reports earnings for Linux system administrators averaging $68,884, Linux system engineers at $99,348 and senior Linux system engineers at $122,071.

GCUX: GIAC Certified Unix Security Administrator

The Global Information Assurance Certification (GIAC) program is part of SANS, a highly regarded source of instruction and research in the information security field. SANS also provides breaking news, operates a security alert service and serves on all kinds of government, research and academic information security task forces, working groups and industry organizations.

The SANS GIAC program encompasses 37 information security certifications across several categories, such as cyber defense, penetration testing, incident response and forensics, management, audit, legal, developer and industrial control systems. The GIAC Certified UNIX Security Administrator (GCUX) falls under its Cyber Defense category, and aims at professionals who install, configure, monitor, secure and audit both Unix and Linux systems.

GIAC certifications must be renewed every four years by earning 36 continuing professional experience (CPE) credits. Also, credential holders must pay a certification maintenance fee of $429 every four years.

GCUX Facts & Figures

Linux+ (CompTIA Linux+ Powered by LPI)

CompTIA exercises extraordinary certification clout at the entry level in many IT niches. This nonprofit has shown itself as willing to team up with more focused IT organizations, associations and consortia to combine their own market reach and visibility with niche smarts and subject matter expertise on loan from various partners.

One great example is the organization’s partnership with the Linux Professional Institute (LPI), which resulted in the CompTIA Linux+ Powered by LPI credential. This unique certification replaced the original CompTIA Linux+ certification in 2010 and uses the same two exams required for LPIC-1 certification.

As a result of this partnership, IT professionals who are serious about Linux can earn both the Linux+ credential and the LPIC-1 at the same time. Candidates must first earn the Linux+ credential and then submit a request to CompTIA asking that their results be sent to LPI to obtain the LPIC-1 certification. CompTIA test records are confidential, so candidates must request that their records be forwarded to LPI when taking the CompTIA Linux+ Powered by LPI exams.

Earning the CompTIA Linux+ Powered by LPI requires candidates to pass two exams. The first covers system architecture, installation and package management, GNU and Unix commands, devices, file systems and standard file system hierarchies. The second test digs into command shells, scripting and data management, user interfaces and desktops, administrative tasks and activities, basic system services, networking fundamentals and security topics. The CompTIA Linux+ Beta test (XK1-004) closed as of October 22, 2018, though candidates who took the test prior to the end date can still access those scores and apply a passing grade to their Linux+ certification. The replacement Linux+ 104 test based on this beta test will become publicly available in April of 2019.

Note that the Linux+ credential is valid for life.

CompTIA Linux+ Powered by LPI Facts & Figures

LPI (Linux Professional Institute) Certifications

The Linux Professional Institute (LPI) started up in October of 1999, almost one decade after Linus Torvalds began his pioneering efforts on the Linux kernel. Since then, LPI has become one of the leading certification providers on Linux subjects and technologies. Given the organization’s distribution-agnostic approach to Linux, it offers excellent coverage of a platform that’s available in many forms and flavors in today’s marketplace.

The LPI Certification (LPIC) program is available in three distinct levels:

• LPIC-1: Linux Administrator: A  junior-level Linux certification with no prerequisites. Candidates must pass two exams that cover basic Linux skills, including installing and configuring Linux on a workstation, working at the command line, performing basic maintenance tasks, and making LAN or internet connections. While you can obtain the LPIC-1 credential directly from LPI, candidates should consider obtaining the CompTIA Linux+ Powered by LPI credential first, which qualifies you for both the Linux+ and LPIC-1 credentials.
• LPIC-2: Linux Engineer: An advanced-level Linux certification that requires an active LPIC-1 certification. Candidates must pass two exams that cover significant Linux skills and topics. The first test covers the kernel, system startup, file system and devices, advanced storage administration, network configuration, system maintenance and capacity planning. The second test covers web services, file sharing, network client management, email services, system security and troubleshooting, and domain name servers.
• LPIC-3: Linux Enterprise Professional Certification: A senior-level Linux certification that requires an active LPIC-2 and passing any single test in the 300 series. Valid test IDs currently include 300: Mixed Environment, 303: Security, and 304: Virtualization and High Availability. The Mixed Environment test covers Samba (domain integration, user and group management, name services, share configuration and so forth), plus OpenLDAP, and working with Linux and Windows clients. The Security test covers network, operations and application security, as well as cryptography and access controls. High availability cluster storage and management, along with virtualization, are covered in the Virtualization and High Availability exam.

In addition to the LPIC-1, 2 and 3 credentials, LPI also offers an entry-level credential, the Linux Essentials Professional Development Certificate (PDC). Linux Essentials focuses on foundational skills, such as creating and running simple scripts, restoring compressed backups and archives, working with the command line, Linux operating system basics, FOSS, and users/groups and file permissions for public and private directories. Linux Essentials is a great way to get started while gaining the skills and knowledge needed for the more challenging LPIC credentials.

LPI’s latest certification is the LPIC-OT DevOps Tools Engineer, which recognizes the effective use of tools for collaboration during system and software development. There are no prerequisites, and the single test lasts for 90 minutes and has 60 questions.

LPIC credentials are worthwhile for IT pros whose chosen Linux distributions do not warrant their own certification programs, and for those seeking broad, vendor- and distribution-neutral coverage of Linux topics, tools and technologies. They are popular among IT pros and in demand among IT employers.

LPIC-1, LPIC-2 and LPIC-3 Facts & Figures

Oracle Linux OCA & OCP

When Oracle bought Sun Microsystems in 2010, it acquired a rich and deep UNIX tradition. Oracle started phasing out Solaris almost immediately after finalizing the Sun acquisition.

Today, Oracle offers associate- and professional-level certifications based on Linux rather than harking back to any kind of UNIX roots. These certifications retain enough of their Sun roots, however, so that courses are not mandatory prerequisites to taking the exams for the two Oracle Linux certifications currently available.

As with other vendor-specific Linux certifications, Oracle’s are most appealing to those who work with or around that distribution, or who wish to work for employers who use those distributions.

OCA and OCP Facts & Figures

Note: Though there is now an OCA and OCP test available for Oracle Linux 7 System Administrator, Oracle has yet to announce this new certification or release the details of new Linux 7-based certification tests for OCA and OCP candidates.

Oracle Linux 6 Certified Implementation Specialist Certification

The Oracle Linux 6 Certified Implementation Specialist Certification is a certification available for those who sell, design, configure and implement Oracle Linux 6 solutions. Though any candidate can complete this certification, it is most typically achieved by Oracle partner implementation personnel with strong foundational experience in Linux and previous field experience implementing Linux 6.

Red Hat RHCSA, RHCE & RHCA

If there’s one major star in the vendor-specific Linux certification firmament, it’s got to be Red Hat. The company has major market presence and serious duration as a commercial provider of Linux platforms and technologies.

Red Hat offers a typical administrator, engineer, architect certification ladder. Unlike many other such programs, however, it offers highly regarded and valued credentials at each rung, along with demanding and hands-on oriented exams and an excellent training curriculum to match. All exams for the following Red Hat certifications are performance based and last two hours or longer.

The giveaway for Red Hat certifications is that all come with acronyms that start with RH, as follows:

• Red Hat Certified System Administrator (RHCSA): This foundation certification vets essential skills in handling files, working at the command line and using system documentation, along with managing systems (boot up, identifying processes, start/stop virtual machines, controlling services), configuring storage partitions and logical volumes, and more.
• Red Hat Certified Engineer (RHCE): This cornerstone certification is designed to test and validate the skills and knowledge necessary to work as a senior-level Linux system administrator. subjects covered include advanced IP routing and services, managing runtime kernel behavior, working with iSCSI, automating maintenance tasks with shell scripts and working with networking services for Web, FTP, NFS, SMB, SMTP, SSH and more. An RHSCA is a prerequisite for the RHCE.
• Red Hat Certified Architect (RHCA): Red Hat’s pinnacle certification offers two paths to certification, depending on which prerequisite advanced Red Hat certification credentials you have already completed: Red Hat Certified Enterprise Microservices Developers (RHCEMDs) and Red Hat Certified JBoss Developers (RHCJDs) can earn an RHCA in Enterprise Applications, and Red Hat Certified Engineers (RHCEs) can earn an RHCA in Infrastructure. In general, the five additional exams that must be passed to achieve the RCHA in either Infrastructure or in Enterprise Applications are specific to each area of specialization, though a few of the tests can be used to satisfy the five test requirement in both RHCA tracks. A number of previously available certification exams have been discontinued for new RHCA candidates and renewals, though those exams can still be applied to the RHCA certification if you’ve already passed them. Find out more about discontinued exams that can be counted towards the RHCA credential on the RHCA page under the Candidate Guidance tab.

Because Red Hat Linux is widely used in the business world, the RHCA certification is an excellent choice for those interested in a more platform-focused path into the Linux world. Of course, for those who already work with or around Red Hat, it is a natural certification choice as well.

RHCSA, RHCE and RHCA Facts & Figures

Beyond the Top 5: More Linux certifications

Outside the top five Linux credentials and programs covered in this article, other Linux certifications may be worthy of your time and attention.

The Linux Foundation, a membership-based organization, promotes the development of the Linux kernel through collaboration, conferences and education. The organization’s small but respected certification program includes the Linux Foundation Certified System Administrator (LFCS) and the Linux Foundation Certified Engineer (LFCE).

IBM continues to offer a handful of Linux-related certifications. One certification of interest is the Certified Database Administrator, which continues to be in demand for those running DB2 on Linux, Unix and Windows systems.

Many industry experts, including Steven J. Vaughn-Nichols, a long-time user and expert on Linux and Unix operating systems, say that certifications can be an important ingredient in a job candidate’s qualifications. But interviewers should also pay close attention to how many Linux systems candidates have set up, managed or used to get a sense of the scale and scope of their experience.

In other words, when you see a web hosting service advertising for Linux jobs, they’re not looking for people who’ve installed and used Linux at home or in a small business setting; they’re looking for professionals who’ve set up and managed Linux in a highly distributed and virtualized data center environment, with lots of complex networking and services coming into the mix.

By JANELLE RETKA of The Seattle Times

The Chattanooga Area Chapter of the Association of Certified Fraud Examiners will be hosting a joint luncheon meeting with the Chattanooga chapters of the Institute of Internal Auditors and Association of Government Accountants on Feb. 19 at the Walden Club in Chattanooga to discuss the common reasons that auditors fail to detect fraud.

Dennis F. Dycus, CFE, CPA, CGFM will be the keynote speaker. Mr. Dycus serves as director of the Division of Municipal Audit for the Office of the Comptroller, State of Tennessee. Mr. Dycus will be speaking on the timely subject, “Why Auditors Fail to Detect Fraud.”

According to the Association of Certified Fraud Examiners, each year every organization loses, on average, each year, an amount equal to five percent of their revenues due to misconduct from within their organizations.

For reservations, please contact Bill Acuff, billacuff@decosimo.com, or call 423 756-7100.

The cost will be $20.00. Deadline for reservations is Feb 15. Lunch will begin at 11:45 a.m. and conclude at 1 p.m. The presentation will qualify for one hour of CPE.

Mr. Dycus is a frequent guest speaker/lecturer for various college business/accounting classes, professional associations, local, state and national conferences and not-for-profit organizations. From the beginning of his career with a national accounting firm, through the last 34 years of involvement with the audits of all forms of governmental entities, he brings a wealth of practical experience to his presentations.

The Division of Municipal Audit is responsible for the annual audit of all municipalities, utility districts, school activity and cafeteria funds, housing authorities, certain not-for-profit organizations and other quasi-governmental entities in the State of Tennessee. In addition, the Division’s staff conducts numerous audits for fraud, waste and abuse each year.

The Association of Certified Fraud Examiners is the world's premier provider of anti-fraud training and education. The Chattanooga Chapter, together with nearly 40,000 other members of the ACFE, is reducing fraud worldwide and inspiring public confidence in the integrity and objectivity within the profession.

Dennis Dycus presently serves as a member of the Accounting Advisory Council for the Gordon Ford College of Business at Western Kentucky University. He previously served as a member of the Accounting Advisory Board at Middle Tennessee State University.

For the last several years, Mr. Dycus has developed and/or conducted training programs in all 50 states, Puerto Rico, Guam, Canada and Europe, for organizations such as the Association of Certified Fraud Examiners; the American Institute of Certified Public Accountants, numerous state CPA societies and various state government associations.

He is the past recipient of the AGA's, National Education and Training Award and has been presented with several Outstanding Discussion Leader Awards by both the Tennessee and Florida Societies of CPAs. In 1998 he was honored with the Association of Certified Fraud Examiner’s Distinguished Achievement Award for his meritorious service in the detection and deterrence of fraud. He was one of only three individuals in 2001 to receive the designation as a Fellow of the Association of Certified Fraud Examiners in recognition for his contribution to expanding the Association’s body of knowledge toward the detection of fraud.

In 2003, he was the recipient of the Tennessee Society of CPA’s first ever Outstanding CPA in Government Award. Mr. Dycus received the Association of Certified Fraud Examiners’ Outstanding CFE in Government Award in 2004. In addition, he has authored articles on auditing for fraud for national publications.

The midterm elections are a month away, and already there are a few Republicans grumbling that Democrats might try to steal certain elections. While voter fraud does occur, in the vast majority of cases candidate quality is the primary factor in deciding who wins. And you can see it by the split in several recent Republican election polls.

Proponents of the 2020 stolen-election narrative claimed that voting machines in several states transferred votes from President Trump to his Democratic challenger, Joe Biden. But apparently the machines only transferred Trump votes, because Republicans did very well in the congressional and state elections that year.

No one has yet been able to provide any evidence to support the stolen-election claim — at least, no evidence that would hold up in court. Fortunately, pre-election polling doesn’t rely on voting machines. And while the polling industry has been going through something of an existential crisis over how to better predict election outcomes, polls rely on voter responses, not voting machines. And several states are seeing a gap between certain Republicans running statewide in the same state.

Consider the recent polling in key states that have been at the center of the stolen-election narrative. Let’s start with Arizona. According to the Real Clear Politics (RCP) average of polls, Republican newcomer gubernatorial candidate Kari Lake was up an average of 2.2 points (between 9/14-9/26) over her Democratic opponent, Katie Hobbs.

By contrast, RCP has incumbent Arizona Democratic Sen. Mark Kelly up by 4 points over his Republican challenger, Blake Masters, for the same time period. That’s a 6.2 point spread between two Republicans running in the same state for statewide office.

That means there are likely more than a few Arizona voters who plan to vote for the Republican gubernatorial candidate but a Democratic Senate candidate, a split ticket.

We see something similar in Georgia. RCP’s average of polls (between 8/24-9/26) has incumbent Republican Gov. Brian Kemp up 6.6 points over Democratic challenger Stacey Abrams. However, the RCP average of polls has incumbent Democratic Sen. Raphael Warnock up less than a point over his Republican challenger, Herschel Walker. Again, a 6-point spread between two Republicans running statewide.

Let’s turn to Pennsylvania, where smooth elections just aren’t the state’s thing.

RCP’s average of polls (between 9/6-9/26) has Democratic gubernatorial candidate Josh Shapiro up a whopping 10.2 points over his Republican opponent, Doug Mastriano. And Democratic Senate candidate John Fetterman is ahead of Republican Mehmet Oz by 4.1 points. So, even though both Republicans are losing in the polls, there’s again a 6-point spread between the two of them.

Now, these polling numbers are likely to change, perhaps significantly, over the next month. The point isn’t the exact poll number, but the spread between two GOP candidates running statewide.

We saw a similar phenomenon in the 2020 election, where a Republican candidate running statewide often received a higher percentage of votes than Trump. As London’s The Guardian observed, “[T]he election wasn’t just about Democrats rejecting Trump by turning out in record numbers. It was also about Republicans and independents who preferred the Republican party — but just without Donald Trump.”

It’s an important point because there are a number of Republican candidates who received strong endorsements from Trump, not because they brought with them a wealth of political expertise or a legacy of public service as an elected official. They got the nod largely because they embraced Trump’s view of the world — and of elections.

Several well-qualified Republican candidates ran in several swing or blue-leaning state primaries. If they had won, they might have been able to supply their Democratic candidate a real challenge. But primary voters in some of those states wanted the Trump protégé. Qualifications and electability were less important.

Yes, several polls are tightening, and the pollsters may be undercounting Republicans again, leading to a bigger-than-expected GOP victory in November. Even so, it’s likely that several potentially winnable seats may remain in Democratic hands.

When William F. Buckley, Jr. (one of the country’s leading conservative voices until his death in 2008, founder of National Review magazine and the longtime host of the PBS program “Firing Line”) was criticized for not supporting the most conservative candidates, he replied he would back “the most right [i.e., conservative], viable candidate who could win.”

It is an extremely important insight, and one that is frequently ignored or forgotten, especially by those who have only recently gotten their political dander up. It’s not just about winning a primary, it’s about winning the election.

Even if Republicans see a probable red wave (or even a red tsunami) come November, it’s likely that several winnable seats will be lost because of not embracing Buckley’s wisdom.

Merrill Matthews is a resident scholar with the Institute for Policy Innovation in Dallas, Texas. Follow him on Twitter @MerrillMatthews.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission. All prices are correct at the time of publishing.

A Democrat suing to get on the ballot in a Kentucky House race appeared in court Monday, with her attorney arguing a certification deadline does not apply to the candidate because of unique circumstances.Democrat Ann Sermersheim filed on Sept. 13 to run against Republican incumbent Kevin Bratcher in this fall's election, but Secretary of State Michael Adams said she missed an Aug. 22 certification deadline to appear on the ballot.Sermersheim's attorney, Anna Whites, argued in court Adams misinterpreted the law, because Sermersheim is replacing another candidate who withdrew on Sept. 12. While acknowledging the Aug. 22 certification deadline, Whites said at the same time state law requires the secretary of state to certify any candidate filling a vacancy after another candidate withdraws. "And we're kind of left in that limbo where, if that only applies to certification of primary winners, and there's not real certification for replacement candidates. Clearly there's just a missing statute," Whites said.Sermersheim is the third Democratic candidate to file to run in this fall's election for House District 29, which includes the southeastern Jefferson County areas of Fern Creek and Seatonville.The first candidate to file, Suzanne Kugler, was disqualified after being drawn out of the district in redistricting, a process controlled by the GOP majority in Frankfort. The second candidate, Matthew Pfaadt, withdrew after Bratcher sued to remove him from the ballot, noting Pfaadt missed a deadline to change his registration from Republican to Democrat.Pfaadt withdrew on Sept. 12 and Sermersheim filed to run on Sept. 13."The law does not anticipate multiple do-overs, gaming the system, or brinkmanship close to the election," Adams wrote in a statement. "County clerks have begun the process of printing ballots with the certified candidates."In court on Monday, Adams' attorney noted the office has certified vacancies in 22 races this year, 16 of which were for Democrats."This is not a partisan issue," attorney Kent Westberry told the judge.The judge did not rule on the issue Monday.The Jefferson County Clerk's Office has not taken a stance in the case, but said if they are required to print new ballots, state law requires the party that nominated the candidate to pay the cost.If Sermersheim's name does not appear on the ballot, her bid to unseat Bratcher will become even more difficult. Few write-in candidates succeed in being elected and Bratcher has easily defeated multiple Democratic challengers who were on the ballot in recent years.Speaking to WLKY News, Bratcher touted his experience."We need an institutional memory for some of the things we do in Frankfort and some of the things we do here in Louisville," he said. "So, we don't want to start with a beginner."Bratcher said that clout helped him secure money for the Fern Creek Community Center.If re-elected, he plans to once again sponsor legislation to get tough on youth offenders."There's young juveniles, criminals that have carjacked and actually that night gone home with their parents," he said. "People can't believe me when I tell them that. There's some changes that need to be made in the law. I've been trying for years to get it passed and hopefully this next session we will pass it."For her part, Sermersheim noted her household ties to the union representing workers at G.E.'s Appliance Park and said she has been volunteering in political campaigns for a decade. "I will get down there and I will fight," she said. "I will fight for all of my constituents."She also pledged to champion health care access, an issue she accused Bratcher and other Republicans of failing to address."This district is about 50 percent Democrat, 50 percent Republican, and to me, we needed two candidates," she said. "The people have a right to choose."

By Brad Reed

© provided by RawStory Laura Loomer wearing a 'Make America Great Again' hat (Facebook)

Laura Loomer, a two-time failed Florida Republican congressional candidate, is filing a lawsuit alleging voter fraud cost her in a recent primary loss to Rep. Daniel Webster (R-FL).

However, as The Daily Beast's Will Sommer reports, Loomer's suit has already suffered a significant blow because a plaintiff in the case is demanding to have her name removed on grounds that she didn't witness any purported voter fraud.

Orange County resident Theresa Rinaldi tells Sommer that, even though she did vote for Loomer, she has no evidence to suggest that the election was stolen from her.

Rinaldo also tells Sommer that her name was wrongly added as a plaintiff to the lawsuit after she had a conversation with controversial right-wing attorney John Pierce, whom she feels tried to coerce her into joining the lawsuit.

READ MORE: 'I'm just not going to leave': New book says Trump planned to blockade himself in White House after loss

"I felt like he was tricking me in that phone conversation, I really did," she explains.

Rinaldi also says she "just about fainted" when she saw her name attached to the lawsuit.

Since losing her primary race to Webster last month, Loomer has defiantly refused to concede defeat, despite the fact that she lost to the incumbent Republican by roughly seven points.

In a recently posted Telegram message, Loomer even went so far as to declare herself officially a congresswoman.

"I actually am the Congresswoman in Florida's 11th District, and everyone knows it," she wrote.

Loomer has baselessly claimed that she only lost to Webster due to "voter fraud," even though this is now her second failed congressional campaign after she went down in flames against Rep. Lois Frankel (D-FL) in 2020 in a race she lost by twenty points.

From left, Rachel Hamm, former California Secretary of State candidate, Audrey Trujillo, candidate for New Mexico Secretary of State, Kristina Karamo, candidate for Michigan Secretary of State, Mark Finchem, candidate for Arizona Secretary of State and Jim Marchant, candidate for Nevada Secretary of State, attend a conference promoting conspiracy theories about voting machines and discredited claims about the 2020 presidential election at a hotel in West Palm Beach, Fla., Saturday, Sept. 10, 2022. The event featured Republicans running for statewide offices that oversee elections in some of the most important battleground states.