含金量最高的信息安全/网络安全专业资质（top 5）：
- CEH: Certified Ethical Hacker
- CISM: Certified Information Security Manager
- CompTIA Security+
- CISSP: Certified Information Systems Security Professional
- GSEC: SANS GIAC Security Essentials
其中1.CEH 2.CISM 4.CISSP是等级较高的资质。3和5更多针对入门级安全从业人员。
以下这五个证书的简介和官方网站地址。
1. CEH: Certified Ethical Hacker
The Certified Ethical Hacker (CEH) is an intermediate-level credential
offered by the International Council of E-Commerce Consultants
(EC-Council). It’s a must-have for IT professionals pursuing careers in
ethical hacking.
主办方官网：https://www.eccouncil.org/
2. CISM: Certified Information Security Manager
The Certified Information Security Manager (CISM) is a top credential
for IT professionals responsible for managing, developing and overseeing
information security systems in enterprise-level applications, or for
developing best organizational security practices. The CISM credential
was introduced to security professionals in 2003 by the Information
Systems Audit and Control Association (ISACA).
主办方官网：https://www.isaca.org/
3. CompTIA Security+
CompTIA’s Security+ is a well-respected, vendor-neutral security
certification. Security+ credential holders are recognized as possessing
superior technical skills, broad knowledge and expertise in multiple
security-related disciplines.
主办方官网：https://certification.comptia.org/certifications/security
4. CISSP: Certified Information Systems Security Professional
The Certified Information Systems Security Professional (CISSP) is an
advanced-level certification for IT pros serious about careers in
information security. Offered by the International Information Systems
Security Certification Consortium, known as (ISC)2 (pronounced “ISC squared”), this vendor-neutral credential is recognized worldwide for its standards of excellence.
主办方官网：https://www.isc2.org/Certifications/CISSP
5. GSEC: SANS GIAC Security Essentials
Another fine entry-level credential is the GIAC Security Essentials
(GSEC), designed for professionals seeking to demonstrate that they not
only understand information security terminology and concepts but also
possess skills and technical expertise necessary to occupy “hands-on”
security roles.
主办方官网：https://www.giac.org/certification/security-essentials-gsec
