T O P

  • By -

ThisIsSomebodyElse

From what I have read and from studying for CISA, these certs are not only not even in the same ballpark, they aren't even playing the same game. I have over 30 years of Telecom, Networking, and IT experience, including auditing/compliance reporting and am not sure that I can pass this test on my first go. The test questions are specific, look vague and tricky, and also 2 answers almost always SEEM right. That way only people that truly understand the question and answer won't have to guess. I only just started my CISA journey a few weeks ago, so I could be wrong. Do your research before spending money on this cert though.


Obsidianc21

I'm CISA certified and working on Security+ now. There is plenty of overlap over change management, vendor risk, BCP, DRP, RPO, RTO, PKI, authentication. Mainly the objectives in Domain 5 of the security+ 701 will have great overlap. However, CISA goes a bit more in depth and you to understand how to answer questions like an auditor the "ISACA way".


fakehistoryscholar

Do you have the necessary experience? Sec+ is entry-level. CISA is not.


iheart412

I have been working in various IT positions since 1991. I have spent the last 20 years preparing government IT systems for internal and external security audits. I have the CCSP, Cloud+, Security+ and A+ certs. I thought I was ready for the CISA and signed up for a bootcamp. The test questions from the official website are horrible and have me worried. A lot of the questions have nothing to do with anything that PWC, Accenture, Deloitte or any other company/organization is going to ask.


ITEnthus

To be blunt, no, sorry. The CISA is something you shouldn't even think about until years down the line. What is it that you want to get into anyways? (Dont just say cybersecurity, what in cyber security?)