Passed CISA 01/22/19 with total scaled score of 633. Should I go with CISM or CISSP or CRISC?

edsern

I took and preliminary passed CISA exam yesterday, first take. I am a CPA and have no experience related to Infosec although I am an IS auditor for 3 years already. Should I go with CISM or CISSP or CRISC? How do you evaluate my chances in passing these certs?

Thanks guys and gals!

DZA_

I'd recommend having a couple solid years of InfoSec management experience before tackling on the exams as both of them require you to have 5 years of experience (CISM; 3 or more domains & CISSP; 2 or more domains) to be certified. You can probably leverage a infosec degree to buffer off a year of experience but you might be a little bit short. Otherwise, since you're on the ISACA track that you might do the CISM first to do the CISSP prep and then the CISSP down the road. 

CISM Requirements

Submit verified evidence of a minimum of five years of information security work experience, with a minimum of three years of information security management work experience in three or more of the job practice analysis areas. The work experience must be gained within the 10-year period preceding the application date for certification or within 5 years from the date of originally passing the exam.

A passing score on the CISM examination, without completing the required work experience as outlined below, will only be valid for 5 years. If the applicant does not meet the CISM certification requirements within the five year period, the passing score will be voided.