What next after CISM?

rasli79

hye all

What you reckon after CISM --?  should straight into CISA or CISSP? other tho my manager still want me to complete the NSE4 by end of this month

I'm aiming to be part of security strategy and management. 
Most of job desc - lot of accronym oif CISA & CISSP

SteveLavoie

I would do CISSP as there is some overlap between CISM and CISSP.  There is many person doing the reverse, ie prepare for the CISSP and do the CISM just after as there is a lot of overlap. 

Also CISSP is the "gold standard" of infosec pro.. so it is worth the time investment

rasli79

SteveLavoie said:

I would do CISSP as there is some overlap between CISM and CISSP.  There is many person doing the reverse, ie prepare for the CISSP and do the CISM just after as there is a lot of overlap. 

Also CISSP is the "gold standard" of infosec pro.. so it is worth the time investment

Thanks Steve,

I was looking at the video and found few domains in CISSP have some similarities what CISM have.
Some of the trainers mentioned that, we just need another 50% to study the CISA and set the mindset as auditor once you complete the CISM.

E Double U

CISSP before CISA. I hold all three and went in this order: CISSP (2015), CISM (2017), CISA (2018). Once you have one (plus the right experience) it makes the others easier to obtain. They all have overlap. 

rasli79

E Double U said:

CISSP before CISA. I hold all three and went in this order: CISSP (2015), CISM (2017), CISA (2018). Once you have one (plus the right experience) it makes the others easier to obtain. They all have overlap. 

yeah, generally some of the term and topics covered on that four CISM domains and expanding with CISSP will be good idea. Later to be add-on with CISA as auditor minded.

This is not include the cost to maintain yearly fees & CPE to be considered

JDMurray

There are not many InfoSec management certs: CISM, CISSP-ISSMP, GSTRT, and C|CISO.

Collect 'em all! 

rasli79

JDMurray said:

There are not many InfoSec management certs: CISM, CISSP-ISSMP, GSTRT, and C|CISO.

Collect 'em all! 

yeah! thanks for the list.

how i wish its claimable