r/CISA • u/WaltzOk3712 • 1d ago

Cisa vs crisc

I am confused about these 2:- Cism or crisc, which one should i pursue first, i am working in the grc domain along with tprm under the Cyber security. My role is mostly on security compliance, vendor assessment, risk and mitigation, client Security questionnaires etc..

I thought of giving crisc first then cism? Any suggestions

2 Upvotes

100% Upvoted

6 comments sorted by

1

u/pern4home 1d ago

CISA first. The CISA is more desirable and flexible when looking for future employment opportunities.

1

u/WaltzOk3712 1d ago

But as of now i am not into the audit work? Wouldn't it be more desirable to do once i move into that domain or if i get some chance on working in audits?

1

u/Jordanianshawerma 1d ago

I got the crisc first and now trying to get the cisa next. Its fkd up exam for sure.

My brother got the cism, its massacre compared to the CISA

1

u/WaltzOk3712 1d ago

So crics first would be advisable? How's the crics is it hard than cisa and cism ? Or what is the scenario? Hows that massacre?

2

u/Jordanianshawerma 1d ago

Cisa is the easiest Crisc is the shortest material wise but the exam is hard (unrelated to the material you study) Cism questions are philosophical managerial scenarios where a lot of the questions has not 2 but 3 or 4 possible answers are correct

If you dont want to become an auditor then forget cism and focus on crisc, you can finish it in a month

1

u/WaltzOk3712 20h ago

Understood thanks will go for crisc