I took the exam on 6th Feb 2013 and managed to nail it after torturous 5 hours

Didnt get any score thou. Had to take 2 breaks to refresh my brain but finally managed to clear it. Should say this exam at times focuses too much on technical details of topics like Cryptography and Telecommunications. Given my experience in IT audit, I have never come across need to know all that stuff.

One question to all : What is the next step? Which exam should I go for now? FYI, I have 4 years of experience with 2 years each in SDLC and IT Audit. All inputs are welcome. Thanks !