CISM Discussions
Certification

If you want to become an executive or get promoted in cyber, is it worth it to get CISSP or CISM? I’m sure it would help and not hurt but just wondering if it’s worth it to put in effort into getting those certifications or better to focus on networking and building leadership skills?

Any thoughts on the CISM certification?

Thoughts on getting CISM and any recommendations for studying for it?

Hi Amazonians.... I have been reached out to by the recruitment for the role on an Industry Specialist. How much would this role pay for 10Yoe with a cisa, cism?

Background: 5+ years of work experience in worked on IT Audits (SOX). CISA certified.
Looking for a certification that can help me transition into more technical areas such as Data Privacy/Cyber (not Pentesting)/ Cloud security.
Completely baffled by the variety of certifications
(CCSK, SSCP, PMP, CIPT, CIPP/E, CAP, CISM, etc) out there and not sure which one to pick given my experience and the areas I want to transition into.

Any suggestions on which certification would be best?

My InfoSec peeps... Does having ISACA or ISC2 certifications such as cisa, cism cissp n stuff have any advantage? Does it add value to your career from a pay or knowledge perspective?

CISM exam - any recommendations on what else I should study other than the ISACA Q/A database?

How difficult is the CISM exam? Looking to start studying. Any tips or guidance would be appreciated

Would anyone be interested in looking over my resume for feedback? I have 5YOE, comp sci degree, security+, cisa, cism

Is IR Readiness Consulting at Accenture a good area to pivot to from IT/Cyber Audit? I'm a newly promoted Senior in Advisory with CISA, CISM, CCSK, and Sec+. ~3YOE. What salary/level should I be looking for? Currently at $87k base(MCOL), but feel like I could do a lot better.

Is it possible to make manager at 4 YOE (4.5 with Co-Op) at Big 4/cyber consulting firms (e.g., Accenture) I am a newly promoted SC at D and recently passed my CISM/looking to get Sec+ and wanted to see anyone has jumped to a M role in that amount of time. Or if 5 YOE is the standard

What’s next?
I am working in the cyber field as a new Manager. I recently acquired the certs CISM, CISSP, and Prince2, I also hold a M.Sc. I’m Too old for full time MBA and not interested in getting deeper into Cybersecurity than I already am. So for the first time in very a very long time (10y) I don’t know what to do. I want to further my career but doesn’t really know how or which way to go. Should I go for an online MBA or something else? So please help a restless mind figure out whats next.

Besides the usuals (CISSP, CISM). If I want to increase my knowledge of security, specifically networks and network security, does anyone have any certification recommendations? I want to be well rounded but I lack the foundational technical network knowledge tbh I’m so SOC and security focused

I am thinking about completing GWU cyber boot camp. I have my CISA and CISM. I also have a master’s in cyber policy. Is it worth it?

How to do make the certs for a federal position? I have two bachelors and master and CISA CISM and can’t seem to make the certs for a INFO SEC job with 15 yrs experience

Did anyone recently pass CISM? I’ve been studying and using the QAE. I went through it the first time getting above 70. The second time I am getting 80+ % in the overall domains but some sections have challenging and odd questions where I would have a lower percentage for that group of questions, in the 70 %.

Would the exam have a mix of easy and hard questions? Are the topics and points in the QAE the same on the exam? Any surprise topics on the exam you didn’t see before?

I feel I was u derhired. I am an analyst. Why did I apply for that position? I guess I'm an idiot. Well, I'm a CISSP, security+, cism, cysa and a few more. Highly experienced in aws. I can do it all from cobol to assembly to c++ And yes j know all the administrative stuff. I know NIST like the back of my hand. I know coso, cubit, iso.. I have other advanrages: I know people on boards and have gotten a great relationship. Been here 1.4 years. Passed up for a promo. Devastated. So no appeal?

I feel I was u derhired. I am an analyst. Why did I apply for that position? I guess I'm an idiot. Well, I'm a CISSP, security+, cism, cysa and a few more. Highly experienced in aws. I can do it all from cobol to assembly to c++ And yes j know all the administrative stuff. I know NIST like the back of my hand. I know coso, cubit, iso.. I have other advanrages: I know people on boards and have gotten a great relationship. Been here 1.4 years. Passed up for a promo. Appeal? I'm livid

I'm thinking about moving to Austin TX to work at FAANG or equivalent in Cyber Security and would like to get your perspective on TC expectations or even just opportunities!

I have 5+ years in cyber security consulting, GRC primarily but have a solid low level tech understanding as I have OSCP, + other general certs like CISSP, CISM. In addition to this, I have been a keynote speaker at conferences, and published articles in cyber security magazines.

In terms of credibility and career progression, what is more impactful, obtaining certification (e.g. Azure, AWS, CISM) or pursing a cybersecurity masters degree. Based out of Canada, at the associate level. Thank you for your responses in advance!

Anyone take the CISM exam recently (within the past year) and can provide some insight on areas you should of focused on more due to questions you remember/topics that were questioned more than expected, etc?

Don't need advice on resources or study habits (or trolls), just want to discuss with those who have taken it recently.

For CISM and eventually CRISC, if you are a ISACA member do you get access to any certification materials or practice questions? I read the benefits of being a member but I heard you get certification material free with the membership.

Hey cybersecurity folks. Currently working in AML non-technical side of things. Exploring making the career jump into cybersecurity with eventual goal of obtaining CISM (certified information security manager).

Currently looking for cybersecurity boot camps to get started.

Do you have any tips/advice for me?

Hey cyber security folks. Currently working in AML non-technical side of things. I’m exploring building a career in cybersecurity with the eventual goal of getting the CISM (certified information security manager).

What are some tips/advice you could give me?

Those with the CISM certificatation, does ISACA accept security podcasts for CPE similar to ISC2?
I'm 12 short and need to make that up this week. Tips/recommendations/advice?

Best resources to learn about and study for CISM certification?

Hi fish ,
I am looking for change if there are any openings soc siem cyber security information security av edr xdr email gateway va pc grc it audit risk management ot security cyber security architecture. I am cism, cisa ceh pmp comptia security+ . So please let me know if you have any openings. Total Experience - 6 yers 10 months np- serving notcie period

Hi folks, it's TOGAF cert useful for cyber security practicioners to improve technical knowledge? If it matters I already have CISSP, CISM, and other certs.

I’m closing in on 3 YOE (1 as a Senior), is it worth it to get Sec+ or CISM as certs at this point or should I just gun for CISSP? Hoping to get some certs under my belt but don’t want to dedicate time to one that won’t matter/increase market value should I choose to exit someday. Only thing I have right now is my work experience, no cyber-related certs.

How important or useful is it to maintain my CISM cert? 20+ YOE, settled role, do I really need it?

I have an opportunity in DC for an international organization. I've +10 yoe in IT, cyber and privacy as well as several certifications (cissp, cisa, cism, azure fundamentals).
Is 110k an acceptable salary for my yoe and creds, considering that, since its an international organization, I'd be tax exempted?

Hi Fishes,
I am a bit confused about the certifications..which certification should I go for.. CISSP or CISM? I am looking forward for a switch in InfoSec profile only.

How hard would it be to bump offered title from SC to M ?
Offer is from Big4,
Currently 4 yoe, cissp,cism, cisa,

Any insight would be appreciated

How hard would it be to bump offered title from SC to M ?
Offer is from Big4,
Currently 4 yoe, cissp,cism, cisa,

Any help would be appreciated