Advice on professional accreditations
Source Reddit Cybersecurity
Discussion
This entry is a discussion post about professional cybersecurity accreditations, specifically focusing on governance, risk, and compliance certifications such as ISC2 CGRC, CISSP, and CISM. It provides advice on choosing appropriate certifications for career development in cybersecurity governance and risk management roles. There is no indication of any security vulnerability or threat in the content.
r/cybersecurity (opens in a new tab)u/tbramb0 points0 comments
I have been told by my boss that I need to enrol in an additional cyber/InfoSec accreditation - they said a “CISSP-like accreditation”, so something broad with a focus on governance, risk and compliance. I am a CompTIA Security+ accredited information security consultant and I would be looking for a broad, strategic security qualification that demonstrates governance, risk, leadership and enterprise security knowledge rather than hands-on engineering capability, which I do not have and am not interested in developing.
What courses would people recommend? Should I go straight for CISSP (would likely lack the necessary work experience but a year or two across all domains, but I am happy to complete the exam and wait for full accreditation)? Or would ISC2 CGRC (https://www.isc2.org/certifications/cgrc) or CISM be better?
I think it is inevitable that I will have to complete CISSP one day, but perhaps doing a different course before attempting CISSP is good preparation?
What are people’s recommendations? What course have others completed and what were their experience?