CISM and CISA

Which exam is more difficult, the CISA or the CISM? Which exam holds more weight if your goal is to work in information security management?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

notshai

JDMurray wrote: »

You must have the CISA (or CISM) cert first before you can start claiming CPEs for it. Unless the rules have been changed, you cannot claim CPEs for educational events that occurred before you were awarded the CISA cert. Check on ISACA's Web site for the latest rules.

sorry i wasnt clear - i am CISA and CISSP certified already. So is it possible?

JDMurray

Usually a training course will advertise that the hours you spend in its classes can be used as CPEs for specific certification vendors. Check the training class literature if its hours are acceptible as CPEs by ISACA, (ISC)2, EC-Council, etc. If there's no mention of CPEs, you might as well try submitting the hours to ISACA anyway. The worse that can happen is that the training hours are refused.

kamal2007

i was planning to take cism first but do not have management experience that is required to get certificate. After going through this thread I think I should first work on CISA. Could anyone suggest the study material for same?

Tongy

https://www.isaca.org/bookstore/Pages/CISA-Exam-Resources.aspx

I'm taking CISM myself, CISA is better catered for with 3rd party material but that's the official link.