CRISC

I’m on a roll now. I’m studying for CRISC and also learning Python.

I have previously sat and passed CISA and CRISC but to me CISM was far more nuanced than the other two.

I have 2 now crisc and cism both just from qanda and the stidy manual.

Parent context: I am confused about these 2:- Cism or crisc, which one should i pursue first, i am working in the grc domain along with tprm under the Cyber security. My role is mostly on security compliance, vendor assessment, risk and mitigation, client Security questionnaires etc.. Reply: Honestly from your job description i'm not sure you'll qualify for CISM. Have you any experience with Incident Repsonse and Security Programs? If not, the by default CRISC is your only option.

Based on you’re role I would do CRISC first out of the two.

For CRISC and CISM, I had already most of the ISACA logic in my head, which made the QAE and the exam significantly easier.

It’s more about getting the head around how ISACA Wants us to think than anything else, at least my experience from passing CISA and CRISC a few months ago.

I think CRISC is also a great certification after CISM as it adds a risk logic that does benefit a security manager.

Started with CRISC, studied for 5 days and crushed that one 2 weeks ago.