Computer Study Plan

Study Course Recommended
=================================
=================================

OSCP       OFFENSIVE

CCNA -SEC  DEFFENSIVE
CCSA       DEFFENSIVE

CISSP      MANAGEMENT - THE JEWEL
CISM       MANAGEMENT

VMWARE     VIRTUALISATION

REVERSE ENGINEER    TECHNICAL
EXPLOIT DEVELOPMENT
CHFI    FORENSICS
ADV. WEB-APP PENETRATION TESTING

=================================

The plain idea

This is a map of professional certifications for a career in computer security, sorted by what each one is really about: offensive (attacking systems to test them), defensive (protecting them), management (running security as a business function), and specialist technical skills like forensics and exploit development. It is a rough route, not a rulebook; the order does not much matter.

Why it matters

Security is a huge field, and newcomers often do not know where to aim. Certifications give structure: each one defines a body of knowledge and a recognised milestone, and employers use them as shorthand for “this person has covered that ground”. Seeing them laid out by category helps you choose a direction, builder, breaker, or manager, rather than wandering.

An everyday analogy

Think of it like martial-arts belts in different disciplines. Some belts are for attacking (striking arts), some for defending (grappling, blocking), and some for teaching and running the dojo (management). You do not need every belt; you pick the art that fits who you want to be, and the belt proves you put in the hours.

A 2026 note on the list

The classics below are still respected, but the landscape has shifted:

• OSCP remains the gold standard for hands-on offensive skill.
• CISSP is still “the jewel” for security management, and CISM alongside it.
• CCNA Security / CCSA have evolved; Cisco folded security into its current CCNA and CyberOps tracks, and Check Point’s CCSA continues.
• Newer entries worth knowing: CompTIA Security+ as an entry point, and cloud security certs (AWS, Azure) which barely existed when this list was made but are now in huge demand.
• The deep skills, reverse engineering, exploit development, web-app pentesting, matter more than any certificate; the cert is a door, the skill is the room.

How it connects

• On Becoming a Guru: the bigger learning philosophy.
• Penetration Testing, Exploitation, Forensics: the fields these certs cover.
• Security Program: the management track (CISSP, CISM).

The truth revealed: certifications are signposts, not the destination; they tell the world which direction you have travelled, but it is the hands-on skill behind them that actually does the work.