Passed CAP

in SSCP
Just passed (ISC)2 CAP exam. Back to the drawing board to take CISSP exam in December.
Has anyone taken the CISSP and CISM exam? Which one was more challenging and rewarding?
Has anyone taken the CISSP and CISM exam? Which one was more challenging and rewarding?
MBA: Information Systems (2008)
BS: Management Information Systems (2006)
BS: Management Information Systems (2006)
Comments
Sorry haven't taken either of those certs, but keep hearing how the CISSP is quite valuable!
[ ] Security + [ ] 74-409 [ ] CEH
Future Goals:
TBD
"The internet is a great way to get on the net." --Bob Dole
BS: Management Information Systems (2006)
In comparison, I feel that the CISSP was the more difficult of the two exams. As the NDA for both (ISC)2 and ISACA prevent discussing the exam material directly, I can only speak in generalities:
1) The CISSP exam (frequently) requires solid knowledge and understanding of the technical aspects of information security (Network/telecommunications and crypto being notable domains in this respect)
2) The CISM exam is more focused on problem analysis and business related aspects of information security (Befitting a credential that is focused towards mid-to-senior level management, so there is less emphasis on technical aspects of information security)
More rewarding? Debatable. You will walk away being a better information security practitioner after studying for either designations. In that respect, knowledge is its own reward. That being said, there is no harm in obtaining both designations, after all.
BS: Management Information Systems (2006)
BS: Management Information Systems (2006)