[CISSP-D] Re: CISSP VS CISA OR CISM

The CISA is geared primarily towards information security auditing. If
you want to be an auditor, that's great, but if you want to work in a
network security or general information security position, the CISSP
is much more appropriate.

Note that you also have to complete the experience requirements for
each of these certifications. Hands-on work experience in certain
types of information security positions is applicable to either the
CISSP or the CISA, but not every type of position applies to both
certification. In particular before you can sit for the CISM, you must
have an actual supervisory role in a network security team where you
are responsible for developing policies and procedures, doing risk
assessments, and in general performing the strategic vision role for
your organization. So you can't simply decide that this certification
"sounds better" on your resume.

If your only reason for getting a CISSP is to compete in the job
market, by all means, go for a CISA or CISM instead.

Kate Wakefield, CISSP
CISSP-Discuss Moderator





 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/CISSP-Discuss/

<*> To unsubscribe from this group, send an email to:
    CISSP-Discuss-unsubscribe@yahoogroups.com

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/