Has anyone done the CISM certification? If so, I'd like to know how difficult it was for you to obtain with a beginner IT background?

753 viewscircle icon3 Comments
Sort by:
Director of Information Security in Consumer Goods9 months ago

With a good Cyber background, a few weeks of study should prepare you for the test.  Use the practice tests a few times and you will be good.

CISO in Government10 months ago

I obtained the CISM about three years after completing my CISSP. I would say the CISM is not really a certification for someone with a beginner IT background.  It's meant to show that you have the skills and management acumen to be a manager of an IT security team, and I think you can't do that very well without a solid IT background.

I will say that if you pass the CISM, you should take the CRISC soon after. There's a ton of overlap between the two certs. 

Lightbulb on1
Chief Risk Officer10 months ago

I obtained my CISM while enrolled in my MBA program and spent a month preparing. It focuses more on general security practices and strategic planning as it relates to security. I come from a background of IT and Security, so it was not as difficult. If you study the principles and take advantage of practice test, you should be fine.

Content you might like

Your core data44%

Your cryptographic keys45%

Your proprietary code9%

Other (please comment below)

View Results

Laptops24%

Mobile devices39%

IoT12%

Network infrastructure17%

Servers2%

Cloud infrastructure3%

Other (please comment below)1%

View Results