What would be the best Cyber Security certification worth taking, for a fresh graduate?

Depending on what you want to do / your security profession aspiration or your IT major / specialization during university days. Some certifications focus more on security control / audit e.g. CISA, CISM & CRISC, some more on cloud security e.g. CCSK & CCSP, some more on hacking & forensic e.g. CEH & CHFI, some on software development security like CSSLP from ISC2. There are also some related to product vendors e.g. security certifications from Cisco, Checkpoint, Fortinet etc. For general ones, you might consider CISSP, SSCP or CompTIA Security+. For popular security certifications in 2019, you can explore following links. Wishing you all the best.

https://www.businessnewsdaily.com/10708-information-security-certifications.html

https://www.cio.com/article/3310836/top-it-security-certifications.html

https://www.computerworlduk.com/galleries/security/top-it-security-certifications-3682183/

https://cybersecurityventures.com/10-hot-cybersecurity-certifications-for-it-professionals-to-pursue-in-2019/

Han Ping Fung Appreciate the well detailed answer. Very helpful.

Practical skill is mandatory, diploma. certification is just a receipt of money, the actual thing is skill, still if you are hiring expert then focus on the following certification also, but preference should be given to his/her real time skill

• CompTIA Security+
• CCNA Security
• CCNP Security
• Certified Ethical Hacker
• CISA
• CISSP

Saeed Ullah Jan Thanks for the input!!

I would recommend the Sec+ certification or the CISA exam which is offered by ISACA. ISACA tends to hold their value better as a result of their meticulously kept organization and as a result, their certifications tend to be worth their weight in gold.

Manula,

Since you specifically stated that you would prefer a certification in the " Information Security Audit and Standards sector", there are a few options for you. An entry-level certification for Information Systems auditing would be SANS GSNA. A more advanced certification, and the current gold-standard for IS auditors, is ISACA's CISA certificate. Before you select either, however, it's best to go to a popular online job board and look for jobs asking for either of those certifications so you can see what roles those certifications can get you.

Certifications must be done and aimed for after exactly deciding in which Security domain do you want to proceed as your career. VAPT differs from SOC, which completely differs from Malware Analysis and Reverse Engineering. While pursuing UG, one must gather and understand all the basics of all of these fields in IT/Cyber Security. Then choose the one domain as a Career and do the certifications accordingly. Every Cyber certification, let it be CCNA, OSWP, OSCP, etc. brings you closer to the Cyber Security world. Eg. If you consider Cyber Security as God, then assume that the pathways of SOC, VAPT/WAPT, etc are different but end up at the same God. After Graduation, one would get placement and start to work in any Cyber Security firm at an Entry level, but after some 4-5 years, he/she would realize that the knowledge gained is resourceful to him/her in securing a career in other similar Security domains too.

CompTIA Security+ is good basic certification; it is not vendor specific & recruiters tend to look for it quite often.

Very interesting discussion