CISM vs CISSP

Tec Diver

I've worked in IT for about 18 years, IT Security for 3-4 and am now an IT Manager. So I have a reasonable background and an interest in Security, but I don't want to get into the technicalities of Security and I'd like to stay in management. So which course would benefit me more, CISM or CISSP? And yes, I know what the M in CISM stands for...I have known managers do the CISSP without being techies too.
I did the CISA this year and SSCP a couple of years ago.

TIA
Eoin

You dont want to get into the technicalities of security? Then why dont you just go and do a management course if you are just interested in management?

Joe Exotic

Tec Diver wrote: »

I've worked in IT for about 18 years, IT Security for 3-4 and am now an IT Manager. So I have a reasonable background and an interest in Security, but I don't want to get into the technicalities of Security and I'd like to stay in management. So which course would benefit me more, CISM or CISSP? And yes, I know what the M in CISM stands for...I have known managers do the CISSP without being techies too.
I did the CISA this year and SSCP a couple of years ago.

TIA
Eoin

Either is fine Ive just applied for the CISM myself, exam in Dec.
Really both are just to tickbox your CV for interviews

Ive know great Info sec mangers with either and neither and crap ones with both !!


Maybe pop over to the Infosec forum for a better audience? may be ask a helpful mod to move thread

http://www.boards.ie/vbulletin/forumdisplay.php?f=24

xlogo

xlogo wrote: »

How does the Comptia security plus compare to those two?

Depends what you want. The Comptia Security+ will teach you technical security subjects, while still being quite highlevel. The CISSP is very broad but quite shallow.

Joe Exotic

xlogo wrote: »

How does the Comptia security plus compare to those two?

Had a very Quick look at the course structure seems to be a lot to cover in five days.

Haven't done it nor do i know anyone who has but i would think its a waste of money(so am happy to be corrected).

You could read up on an awful lot of it online for free or use coursera, or somewhere like this
https://www.mooc-list.com/tags/cybersecurity

Then when you know where your interest lies spend your money on a course which specialises in one area.

Far more benefit in that if you ask me, also if your interested in longer term study UCD and Blanch both run good partime computer Forensics masters


Just my two Cents

murphk

murphk wrote: »

Had a very Quick look at the course structure seems to be a lot to cover in five days.

Haven't done it nor do i know anyone who has but i would think its a waste of money(so am happy to be corrected).

You could read up on an awful lot of it online for free or use coursera, or somewhere like this
https://www.mooc-list.com/tags/cybersecurity

Then when you know where your interest lies spend your money on a course which specialises in one area.

Far more benefit in that if you ask me, also if your interested in longer term study UCD and Blanch both run good partime computer Forensics masters


Just my two Cents

5 days? Have things changed drastically since I did it? I got the study guide, spent 3 months studying it then did the exam. Like many general purpose security courses its very broad, but the content is(was) decent. The section on cryptography is(was) good.

Joe Exotic

Deleted User wrote: »

5 days? Have things changed drastically since I did it? I got the study guide, spent 3 months studying it then did the exam. Like many general purpose security courses its very broad, but the content is(was) decent. The section on cryptography is(was) good.

Sorry did a quick search last night before bed and found a study course in UCD Which i then assumed was it


Of course the exam and the content covered is not the same

I should have said dont do the study course

My Bad

Lesson learned dont post when tired

Tec Diver

xlogo wrote: »

How does the Comptia security plus compare to those two?

I did Security+ studying from the book after a couple of months, found it pretty easy, but I was working on a Security team at the time. I wouls call it more entry level.