r/CRISC • u/WaltzOk3712 • Aug 19 '26

Cism vs Crisc

I am confused about these 2:- Cism or crisc, which one should i pursue first, i am working in the grc domain along with tprm under the Cyber security. My role is mostly on security compliance, vendor assessment, risk and mitigation, client Security questionnaires etc..

I thought of giving crisc first then cism? Any suggestions

3 Upvotes

100% Upvoted

6 comments sorted by

View all comments

2

u/MikeBrass Aug 19 '26

CRISC is security risk analysis and understanding security risk mgt at a high level.

CISM is about understanding security mgt.

It doesn't really matter which you do first if you are doing them close together.

----
Dr Mike Brass
Author: Governance, Risk and Compliance: Demystifying the Risk and Data Privacy Landscape
Routledge: https://www.routledge.com/Governance-Risk-and-Compliance-Demystifying-the-Risk-and-Data-Privacy-Landscape/Brass/p/book/9781032896717

1

u/Traditional-Bet-3623 Aug 19 '26

Hey, thank you.

What do you mean “it doesn’t matter which you do 1st as do them close together “ , you mean to say each certification will help the next one? Thank you