What are people's thoughts on the GSNA vs. CISA? I am pretty slammed with a new job but am doing some research on what would be the next best certification. The CISSP was a lot of work, but now I am actually having to apply these concepts (GRC) in real life. Given my limited amount of time and energy, I'd like the next cert to offer value beyond extra letters on my business card