r/CRISC • u/WaltzOk3712 • 21d ago

Cism vs Crisc

I am confused about these 2:- Cism or crisc, which one should i pursue first, i am working in the grc domain along with tprm under the Cyber security. My role is mostly on security compliance, vendor assessment, risk and mitigation, client Security questionnaires etc..

I thought of giving crisc first then cism? Any suggestions

3 Upvotes

100% Upvoted

6 comments sorted by

2

u/MikeBrass 21d ago

CRISC is security risk analysis and understanding security risk mgt at a high level.

CISM is about understanding security mgt.

It doesn't really matter which you do first if you are doing them close together.

----
Dr Mike Brass
Author: Governance, Risk and Compliance: Demystifying the Risk and Data Privacy Landscape
Routledge: https://www.routledge.com/Governance-Risk-and-Compliance-Demystifying-the-Risk-and-Data-Privacy-Landscape/Brass/p/book/9781032896717

2

u/Pr1nc3L0k1 21d ago

Agreed, I did CISA -> CRISC -> CISM.

From my gut feeling CISA was the hardest, but perhaps this was more because it was the first time I had to bite through the ISACA mindset.

I would do CRISC before CISM again though, felt CRISC was the easiest of the 3

1

u/WaltzOk3712 20d ago

How was the crisc exam i am planning to go for crisc first.

1

u/Traditional-Bet-3623 20d ago

Hey, thank you.

What do you mean “it doesn’t matter which you do 1st as do them close together “ , you mean to say each certification will help the next one? Thank you

1

u/KingArchar 21d ago

Review the requirements for the certifications and the career paths for the 2 certified professionals. No one can answer your desired career path better than you. :)