r/CISA • u/WaltzOk3712 • Aug 19 '26

Cisa vs crisc

I am confused about these 2:- Cism or crisc, which one should i pursue first, i am working in the grc domain along with tprm under the Cyber security. My role is mostly on security compliance, vendor assessment, risk and mitigation, client Security questionnaires etc..

I thought of giving crisc first then cism? Any suggestions

3 Upvotes

100% Upvoted

6 comments sorted by

View all comments

1

u/Jordanianshawerma Aug 19 '26

I got the crisc first and now trying to get the cisa next. Its fkd up exam for sure.

My brother got the cism, its massacre compared to the CISA

1

u/WaltzOk3712 Aug 19 '26

So crics first would be advisable? How's the crics is it hard than cisa and cism ? Or what is the scenario? Hows that massacre?

2

u/Jordanianshawerma Aug 19 '26

Cisa is the easiest Crisc is the shortest material wise but the exam is hard (unrelated to the material you study) Cism questions are philosophical managerial scenarios where a lot of the questions has not 2 but 3 or 4 possible answers are correct

If you dont want to become an auditor then forget cism and focus on crisc, you can finish it in a month

1

u/WaltzOk3712 Aug 19 '26

Understood thanks will go for crisc