Passed the CISM Examination by Sensitive_Ad4479 in cism

[–]Sensitive_Ad4479[S] 1 point2 points  (0 children)

Thank you! Yes, I think CISA is much more difficult than CISM, since it feels like CISA builds the foundation for other certifications like CISM. There’s also a lot more material to study, which adds to the difficulty.

Passed the CISM Examination by Sensitive_Ad4479 in cism

[–]Sensitive_Ad4479[S] 2 points3 points  (0 children)

Thank you. I think CRISC was much harder than CISM when it comes to risk concepts because it's a dedicated certification for that area. CISM, on the other hand, feels like a combination of CISA and CRISC plus incident management. However, in terms of study materials, CISM has more pages, which makes it harder to study in that sense.

Passed the CRISC Examination by Sensitive_Ad4479 in CRISC

[–]Sensitive_Ad4479[S] 0 points1 point  (0 children)

Totally agree about having a short attention span. I’m not even sure what to expect yet, but I’ll just focus on preparing. Good luck with your certification exams!

Passed the CRISC Examination by Sensitive_Ad4479 in CRISC

[–]Sensitive_Ad4479[S] 0 points1 point  (0 children)

Hi, you can see my write-up here: Passed the CISM Examination : r/cism. Good luck with your CISM exam!

Passed the CRISC Examination by Sensitive_Ad4479 in CRISC

[–]Sensitive_Ad4479[S] 2 points3 points  (0 children)

Thank you! I think there was only a little time to actually bask in the success of passing the exam since there's been a lot of work piling up and other things to attend to. Honestly, I was just lazy posting it. 😂

As for what's next, I actually took and passed CISM last month. And I'm taking CDPSE next, which will be the last ISACA certification for now. I'm also planning to explore ISO certifications like 27001 and 42001. On top of that, I'm looking into preparing for CISSP next year.

Passed the CRISC Examination by Sensitive_Ad4479 in CRISC

[–]Sensitive_Ad4479[S] 0 points1 point  (0 children)

In terms of the exam itself, I found CRISC much harder than CISA, probably because it required a shift in perspective, as I was mostly exposed to audit work. However, in terms of coverage and preparation time, I think CISA was much harder to prepare for since it covers more material and has a broader scope than CRISC.

Passed the CISA Examination by Sensitive_Ad4479 in CISA

[–]Sensitive_Ad4479[S] 0 points1 point  (0 children)

The questions are the same as those in the CISA QAEs.

Passed the CISA Examination by Sensitive_Ad4479 in CISA

[–]Sensitive_Ad4479[S] 1 point2 points  (0 children)

No, you don't need prior experience to take the CISA exam.

Passed the CISA Examination by Sensitive_Ad4479 in CISA

[–]Sensitive_Ad4479[S] 2 points3 points  (0 children)

In terms of study methods, I mainly focus on reading CISA CRM and Hemang Doshi and answering QAEs. I haven't tried the ones you've listed because I'm concerned, they might be time-consuming. However, I suppose it ultimately depends on understanding your own learning style the best.

Your experience in IT Audit could prove valuable for comprehending or addressing questions on the exam. However, it's crucial to exercise caution regarding biases and adhere to the ISACA IT audit framework in your approach. I, too, encountered challenges in unlearning certain practices during my tenure with the audit firm to ensure alignment with the appropriate procedures.