I was going to go for the (isc)2 but I have decided to go the route with Microsoft. I want to learn more of the architecture and building of and maintain of security with enterprize applications. As I am paging through the lessons it appears that I am arrive here at almost a cross road between 2003 and 2007-8 servers. Also I noticed something about 4 core requirements are these all changing as well and should I wait for a full transition? But I have most of the training done already from the DoD but never took the test afterwards. The point being is there new core requirements and then for lets just call them electives to become a "security" expert. Should I just forget the 2003 SR2 info and just get to know the 08. Basically I have been trained by the government so I need very Linear instructions and I have as research already have a ton of lesson I don't really need. Just a quick post to a plausible curriculum for what I want: like you need the 70-71-72-73-74, then whatever numbers for security. I will continue to forge ahead on my own but I will check back and see if there is anything here.