EH-Net

Do I have to recertify?

From June 2007 onwards, CEH certification will be valid for 2 years. You will need to earn EC-Council Professional Education Credits (EPE) to maintain the certification.

Well, I didn't know EC-Council will be providing webinar each month but looking at their website you're right.

Hello Everyone,

I am pleased to note that the new ECE points system has generated
a lot of interest.

On the outset, let me make the intention clear to everyone.

The EC-Council Continuing Education Points system is not something
that EC-Council as created to make live more difficult for it's
members.

As EC-Council has become internationally accepted as a world leader
in Information Security Certification, it needs to move towards
attaining the ANSI/ISO 17024 standards and as such it is imperative
that we meet international certification standards.

This is not a revenue generating exercise. This is a continuing
education exercise. Some of our certified members carry the CEH
title. However, they passed the CEH V 1.0 !

Clearly, they could not match the expertise of a properly educated
and certified member with CEH V 5!

In addition to that, all of the major government agencies that we
work with require certification authorities to impose the credits
system.

Agencies want to know that the certification means something in the
longer term....and that the people they hire have the relevant
knowledge continuously.

The list of criteria posted on the Website is not an exhaustive list. The
webinars are free and for the benefits to our certified
members.However members must continue to learn....just like the
legal, medical and accounting professions.

This list will grow. We are communicating with other certification
bodies to have an exchange program.That is one of the reason's why
the launch date for this is Jan 2008 and not immediately.

I have received a lot of commendation from certified members who
are pleased to note that EC-Council has embarked on a crusade to
implement the free webinars for the benefit of the security
community. This is not meant to be a forum for members to
exclusively collect ECE points.

This is just one of the methods. Our desire is that members will take
this to carry on the process of learning. This process will grow and
when members contribute articles , we hope to grow our knowledge
base collectively by learning from the experiences of each other.

We hope that some of you will also speak in some of the EC-Council
Security Summit's that take place all over the world.

You will see that the speakers are all vendor neutral and are
speaking about the latest and most relevant issues that benefit you.

The next speaker is Dan Hoffman (author of Blackjacking).

I look forward in seeing you all there.

Thank You,

Regards,

Jay Bavisi
President,
EC-Council

Hello Members,

I would like to introduce myself. My name is Hanan Wagie and I am the newly appointed EC-Council's  Certification Manager.  My main role is to handle any issue related to any of  our members' certifications.

We are so glad that you are  voicing out your concerns. Your objective contribution will help EC-Council to continually enhance its services and satisfy its people.  To address these concerns and similar issues, EC-Council has formed a Certification Committee that will post its  responses and decisions on the portal within the next few days. Please note that I will keep you posted with the link.

Just to share with you a few but critical decisions......We are glad to announce that the Certification Committee has decided that $50 is ECE annual maintenance fees  per MEMBER not certification. Moreover, 120 points should be earned every three years by each MEMBER  and not each certification!

Isn't that great!

Your objective contributions will always add value. So please don't hesitate voicing them out. If any member requires advice on his/her specific case, please directly email me at <certmanager@eccouncil.org>

Thank you & kind regards


Hanan Wagie
Certification Manager
EC-Council
certmanager@eccouncil.org

Even if I WANTED to recertify, there is no place near me to do the exam. The place where I originally passed the exam, does not offer the exam. The school where I did my class has NEVER even offered the exam.

If I want to recertify, I'm looking at LEAST a 2 hour drive. And I don't pass exams on the first time.

Then again how different is the new exam from the one that I did back in Dec. 04??? Maybe they could just do an exam with the new questions covering the "new" material we need to know, and they could also (maybe) drop the price of the exam a little?  ::) Yeah, Right.

Everything is outdated in a matter of week. 0-days, vulns, etc are all in a matter of day's work. Since we are expected to know what kind of malware, vulns, virus, trojans we are dealing with, we are actually updating ourselves.

Dear Members,

I think it is imperative that I say something to represent the official
stand of EC-Council on this matter as it has generated a lot of debate
and interest.

Firstly, this site IS NOT censored.

Secondly, the ONLY reason I called DARBY is because he and I have
been in communication before over a couple of issues. Since he had
a concern, I saw no harm in updating him.


Thirdly, I find it shocking that there are allegations that no one from
EC-Council is responding. I find it unacceptable. We have over
12,000 members in 60 countries. We have posted a message on this
site that the committee is meeting and discussing this thoroughly.
The CPE points start in JAN 2008. It is not until 2011 before we
“decertify violators!

So lets think logically. Assuming some of you decide not to achieve
the CPE and instead remain as CEH V 4. In 2011, we are looking at
CEH V 11! Do you think you will even stand a chance in the career
market without the CPE to render you updated ?

I am paying particular interest to a post a few days ago that made
some very important comments:

I hope to address it here.


a) The fee of $50.

All major certification corporations charge an administrative fee.

ISC 2 and ISACA too have an annual fee. The proposed fee from
EC-Council is much lower than others.

Having said that , the Certification committee is sensitive to the
needs of our members.

One of the propositions that we have on the table is to remove the
fee altogether.

However, if this is the case, then members will not get any physical
certificates.

Members can then opt to have electronic certificates or physical
certificates at a fee.


b) The issue of Grandfathering :

The whole concept of grandfathering negates the concept of
continuing education.

I would like to reiterate that the while concept of CPE is not
something that EC-Council has dreamt about or made up. This is an
INDUSTRY move towards quality.

Lets debate this issue a little.

How do we verify if a CEH V 2 is up to date with his knowledge?

Every profession requires retraining and education. Accountants,
Attorney’s and even doctors.

Why should our profession be less? Are we saying that Security
Professionals are less relevant?

Would we not increase our value if we prove to the industry that we
are up to date with knowledge in our profession?

This is why SANS, ISC2 , ISACA have all adhered to this standard –
ANSI 17024

CompTIA will follow next as I have met with their leadership last
week , here in the US.

We are trying to set standards so that our members can be proud to
belong to an organization that is committed to quality.

This is a shift in International Certification policy.

I thank the Irish JP for pointing out that apparently EC-Council had
previously stated that certification is for life (based on versions).

As I said above, we do not want to introduce this naturally, but this is
the industry standard. When we said the above, it was because that
was correct at that time. Today, the ANSI rules are applicable and if
we fail to adhere, many of our members will have a lot to loose.

Dod8570 mandates ANSI certification. Soon employers will follow
suit. Do we want CEH to be an ordinary certification or the crème of
the lot? Do we want employers to recognize us as the best in what we
do or as yet another certification?

Having said that, we are trying to get feedback from our valued
members on new policies.

That is why we posted this on this portal – UNCENSORED.

We want to know what is the feedback so that we can improve our
service to our valued members.

I am personally going to speak to the senior management of ANSI
and will keep you all posted.

If grandfathering is acceptable to ANSI, then it will be to us too.

Until then, lets hold our comments.


c) No Information?


Please note that we had posted the intention for ECC to adhere to
ANSI17024 . Many of you do not accept mails from
editor@eccouncil.org and as such, it may have been in your spam
box.

Here is the excerpt of what was sent.


EC-Council Continuing Education Program Begins in 2008
Beginning 1 January 2008, EC-Council certified professionals will
need to maintain their security certifications. With the introduction of
the EC-Council Continuing Education (ECE) Program, EC-Council
certified professionals will be required to continuously gain
knowledge and re-educate themselves so that they are constantly
aware of the latest issues surrounding the security industry.
EC-Council certification titles which will be part of the ECE program
include:
0.     Certified Ethical Hacker
0.     Computer Hacking Forensic Investigator
0.     Certified Network Defense Architect
0.     EC-Council Certified Security Analyst
0.     Network Security Administrator
0.     EC-Council Certified Secure Programmer
EC-Council certified professionals must meet the ECE program
requirements or face revocation of their certification title. Individuals
whose certification title has been revoked due to non-compliance will
need to retake the certification exam to receive the said certification
title again. An appeal process is in place for members who intend to
oppose a revocation.

Members can earn ECE points through various means such as by
taking the latest version of a certification’s exam, attending EC-
Council events and webinars, and writing information security
articles. A more detailed list of ECE points earning activities is
available on the EC-Council website.

For more information on the ECE program, please visit the ECE
webpage.

I hope this sheds some light to all of you.

Any change is always difficult to accept. However, we are entrusted
to protect the certification and the image of the CEH holders
worldwide.

This is the same process that ISC2 , SANS and even ISACA went
through.

I hope some of you will take it positively and see what the true
intentions are.

$50.00 can't even cover the set up and admin costs of the new portal
to hold , maintain and track the points of the thousands of the
members. I am personally "for" the removal of the fee if that makes
the members happier.

Nothing is more important that our certified members.


Thank You,

Regards,

Jay Bavisi
President,
EC-Council
jay@eccouncil.org

hi phreak0ut and welcome.

I disagree with this statement. Firstly the malware taught in the CEH is all the old but very well known malware such as SubSeven, NetBus and Back Orifice trojans, and viruses and worms such as Code Red, Nimda, Sasser and Slammer. The point is to teach the principles behind the malware, how they work and what they do. After all trojans will allways open backdoors and worms will always self-replicate, regardless of how they do it.

Just this week I dealt with 2 Linux boxes that were exploited with malware that's been known since 2002 (http://www.symantec.com/security_response/writeup.jsp?docid=2004-052312-2729-99).

Finally I'd rather not discuss the finer details of how my customers boxes got cracked. Just FYI theses were 2 separate boxes from 2 separate customers in totally different parts of the world, exploited by the same cracker (or cracker group). The software running was the latest up to date.

It has been a while since this post been updated and wanted to see if most of you were able to get your cert renewed and if the process was changed for the best or is it still the same?
After the initial post when they finally provided us with the ECE delta page I was able to get most of my points in and renewed till 2011, hopefully they haven’t made drastic changes that I am out of the loop on since I try to go into the forums and can’t find any new information on this.

Thank you