CISA / CISM / CISSP - Which certification for moving to ICT Security field?

TestLink · 03-06-2019 12:05pm #1

I have 8 years experience in IT Support + Manual Software testing. Currently preparing for Prince 2 certification. I wish to move to IT management side of things and is interested in ICT Security.

May I know which one of the following I should go:

CISA / CISM / CISSP

Is CISM difficult to attain?

horgan_p · 04-06-2019 5:01pm

CISSP will need you to show 5 years experience covering at least 2 of the 8 domains.
So by design it isnt suitable as an intro to IT security.

I have seen colleagues studying for CISM but I couldnt say how good or bad it is.

TestLink · 04-06-2019 5:31pm

Any idea how difficult is the CISM exam? Would self study be enough?

horgan_p · 06-06-2019 4:31pm

Most IT exams can be done using self study , video training and practice exams.
How long it takes is entirely up to you

TestLink · 06-06-2019 5:37pm

I have IT experience in the following domains:
Telecom
Healthcare
Public Sector
Non Profit

Can you suggest an entry level / mid level certification?

Prefer something that would go along with project management.

Thanks...

horgan_p · 06-06-2019 6:00pm

I think you misunderstand, the domains for CISSP are :

Security and Risk Management.
Asset Security.
Security Architecture and Engineering (includes cryptography)
Communications and Network Security.
Identity and Access Management.
Security Assessment and Testing.
Security Operations.
Software Development Security.

TestLink · 06-06-2019 6:27pm

So is there any thing I could do?

horgan_p · 07-06-2019 8:00am

so in your 8 years experience can you show that you have experience in any of the domains that I listed above ?

If you want to get into IT security, I'd suggest doing the security+ exam.

Alternatively - look at job postings for jobs you want. Look at the requirements, there will always be some in common and start there ?

TestLink · 08-06-2019 9:11pm

horgan_p wrote: »

so in your 8 years experience can you show that you have experience in any of the domains that I listed above ?

If you want to get into IT security, I'd suggest doing the security+ exam.

Alternatively - look at job postings for jobs you want. Look at the requirements, there will always be some in common and start there ?

Thanks...

TestLink · 21-06-2019 3:12pm

TestLink wrote: »

Thanks...

I only have intermediate level networking knowledge.

Would I be able to do SSCP? Or should I go for Comptia Security+?

Any other certification I could do that deals exclusively with IT Auditing?

I am not in to pen test and all. So looking for IT audit course + certification.

Thanks...

CISA / CISM / CISSP - Which certification for moving to ICT Security field?

Comments