Post #2289862

2026-04-27 16:38 UTC

Honestly one of the most interesting parts to me as I enjoy the concept but it can be tricky to filter out bad information from good. Do you have any recommended readings on the subject, any books or info you would consider to be biblical in their importance or fundamental?

Replies (1)

@village604@adultswim.fan 2026-04-27 17:40

Just start with the free [CC cert from ISC2](https://www.isc2.org/certifications/cc). It's basically just an introduction to Infosec theories and terminology. From there you have to decide if you want to work in analytics or GRC (governance, risk, compliance). First is more tech oriented and second is more policy and documentation, although many roles combine the two. If you want to go the tech route, get your A+, Network+ and Security+ from [CompTIA](https://www.comptia.org/en-us/certifications/), then you can pick one of many fields like networking security, systems security, and dev security. For the GRC route, if you're in the US the [NIST 800-53r5](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf) publication is a great place to start, although it can be difficult to translate their vague wording into what work needs to be done.

Open ##2289863