BTW, you might find this post interesting.
. (You have to be a member to register and read that forum).
Dear Members,
I think it is imperative that I say something to represent the official
stand of EC-Council on this matter as it has generated a lot of debate
and interest.
Firstly, this site IS NOT censored.
Secondly, the ONLY reason I called DARBY is because he and I have
been in communication before over a couple of issues. Since he had
a concern, I saw no harm in updating him.
Thirdly, I find it shocking that there are allegations that no one from
EC-Council is responding. I find it unacceptable. We have over
12,000 members in 60 countries. We have posted a message on this
site that the committee is meeting and discussing this thoroughly.
The CPE points start in JAN 2008. It is not until 2011 before we
“decertify violators!
So lets think logically. Assuming some of you decide not to achieve
the CPE and instead remain as CEH V 4. In 2011, we are looking at
CEH V 11! Do you think you will even stand a chance in the career
market without the CPE to render you updated ?
I am paying particular interest to a post a few days ago that made
some very important comments:
I hope to address it here.
a) The fee of $50.
All major certification corporations charge an administrative fee.
ISC 2 and ISACA too have an annual fee. The proposed fee from
EC-Council is much lower than others.
Having said that , the Certification committee is sensitive to the
needs of our members.
One of the propositions that we have on the table is to remove the
fee altogether.
However, if this is the case, then members will not get any physical
certificates.
Members can then opt to have electronic certificates or physical
certificates at a fee.
b) The issue of Grandfathering :
The whole concept of grandfathering negates the concept of
continuing education.
I would like to reiterate that the while concept of CPE is not
something that EC-Council has dreamt about or made up. This is an
INDUSTRY move towards quality.
Lets debate this issue a little.
How do we verify if a CEH V 2 is up to date with his knowledge?
Every profession requires retraining and education. Accountants,
Attorney’s and even doctors.
Why should our profession be less? Are we saying that Security
Professionals are less relevant?
Would we not increase our value if we prove to the industry that we
are up to date with knowledge in our profession?
This is why SANS, ISC2 , ISACA have all adhered to this standard –
ANSI 17024
CompTIA will follow next as I have met with their leadership last
week , here in the US.
We are trying to set standards so that our members can be proud to
belong to an organization that is committed to quality.
This is a shift in International Certification policy.
I thank the Irish JP for pointing out that apparently EC-Council had
previously stated that certification is for life (based on versions).
As I said above, we do not want to introduce this naturally, but this is
the industry standard. When we said the above, it was because that
was correct at that time. Today, the ANSI rules are applicable and if
we fail to adhere, many of our members will have a lot to loose.
Dod8570 mandates ANSI certification. Soon employers will follow
suit. Do we want CEH to be an ordinary certification or the crème of
the lot? Do we want employers to recognize us as the best in what we
do or as yet another certification?
Having said that, we are trying to get feedback from our valued
members on new policies.
That is why we posted this on this portal – UNCENSORED.
We want to know what is the feedback so that we can improve our
service to our valued members.
I am personally going to speak to the senior management of ANSI
and will keep you all posted.
If grandfathering is acceptable to ANSI, then it will be to us too.
Until then, lets hold our comments.
c) No Information?
Please note that we had posted the intention for ECC to adhere to
ANSI17024 . Many of you do not accept mails from
editor@eccouncil.org and as such, it may have been in your spam
box.
Here is the excerpt of what was sent.
EC-Council Continuing Education Program Begins in 2008
Beginning 1 January 2008, EC-Council certified professionals will
need to maintain their security certifications. With the introduction of
the EC-Council Continuing Education (ECE) Program, EC-Council
certified professionals will be required to continuously gain
knowledge and re-educate themselves so that they are constantly
aware of the latest issues surrounding the security industry.
EC-Council certification titles which will be part of the ECE program
include:
0. Certified Ethical Hacker
0. Computer Hacking Forensic Investigator
0. Certified Network Defense Architect
0. EC-Council Certified Security Analyst
0. Network Security Administrator
0. EC-Council Certified Secure Programmer
EC-Council certified professionals must meet the ECE program
requirements or face revocation of their certification title. Individuals
whose certification title has been revoked due to non-compliance will
need to retake the certification exam to receive the said certification
title again. An appeal process is in place for members who intend to
oppose a revocation.
Members can earn ECE points through various means such as by
taking the latest version of a certification’s exam, attending EC-
Council events and webinars, and writing information security
articles. A more detailed list of ECE points earning activities is
available on the EC-Council website.
For more information on the ECE program, please visit the ECE
webpage.
I hope this sheds some light to all of you.
Any change is always difficult to accept. However, we are entrusted
to protect the certification and the image of the CEH holders
worldwide.
This is the same process that ISC2 , SANS and even ISACA went
through.
I hope some of you will take it positively and see what the true
intentions are.
$50.00 can't even cover the set up and admin costs of the new portal
to hold , maintain and track the points of the thousands of the
members. I am personally "for" the removal of the fee if that makes
the members happier.
Nothing is more important that our certified members.
Thank You,
Regards,
Jay Bavisi
President,
EC-Council
jay@eccouncil.org