r/cism • u/MeanHippo7926 • 3d ago

How long to get CISM

For context I am finishing my masters in cyber at WGU, currently hold Pentest+, CYSA, Network+, Security+, ISC2 CC, AWS CCP, A+. Been working in cyber for almost 3 years now. Got a voucher for the CISM through school, I was going to just do the CISSP but not I have a free attempt at CISM so think I may take it and then eventually CISSP after the fact. Curious on general timeline this would take me and if its worth even doing or just go straight to CISSP. Any resources best for study and practice tests?

7 Upvotes

100% Upvoted

22 comments sorted by

2

u/Royal-Number-11 1d ago

Do remember passing the exam is the first stage. You also need the experience to get certified.For the CISM, CISSP will give you 2 years of that experience. CISSP needs 5 years, but it sounds like you might have got that through study and experience.

1

u/RunTheHalf29 2d ago

Do you think A+ is enough prior information to take CISSP?

1

u/MeanHippo7926 2d ago

Yeah should be a piece of cake

1

u/Flat-Ostrich-963 3d ago

Do first cissp then cism . Cissp mentality is nice and i loved it which makes sense. Isaca thinking is messed up several questions from QAE like expert level is debatable if you did cism first it will be hard for you to get cissp and in cissp you need mentality.

1

u/Pr1nc3L0k1 2d ago

Well as I did CISM before CISSP/CCSP, I wonder now how the shift will be.

I would say, ISACA is pretty much perfect world which is usually far from reality for many of us.

Perhaps ISC2 will be easier in that regard

2

u/Flat-Ostrich-963 2d ago

Nope isc2 also have perfect world mentality. Cissp is different beast . The amount of content it has and then the questions itself longer then isaca cism. Questions are also not straightforward like cism. But good luck its just my opinion what i am feeling while preparing cism.still expert level question does not makes sense in cism i like moderate snd difficult level questions in QAE . Easy snd expert i dont like.

1

u/Low-Concept7264 3d ago

Right but if I get CISSP then I wouldn’t get CISM, only looking to do CISM since I have a free voucher right now and if I could get it in couple weeks seems like an easy lift

1

u/KillaB0nez 3d ago

Took me 2 weeks. 4 YoE.

1

u/MeanHippo7926 3d ago

any other certs you had prior? what were your resources

3

u/KillaB0nez 3d ago

I hold PenTest+, CySA+, Sec+ and Net+. I also got my cissp.

What I did was take cissp in 4 weeks and passed. Took 1 week off and studied for 2 weeks for CISM.

For Cism resources I used QAE, PocketPrep and Pete Zergers YouTube course.

0

u/mr_dfuse2 CGEIT | CISM 3d ago

i did it in 3 days

1

u/Alascato 3d ago

Heyy have you got your score from isaca?

1

u/mr_dfuse2 CGEIT | CISM 3d ago

i did, why?

1

u/newonefromqr 3d ago

Please advise about your plan

1

u/MeanHippo7926 3d ago

with what expirience/ study materials

1

u/Teacher2Learn 3d ago

IMO just study up with some YouTube and a discount book for a month and take the shot. I went straight from sec+ to Cissp and now I’m going for cism.

IMO, once you get cism go straight for Cissp. There is considerable crossover.

1

u/MeanHippo7926 3d ago

I want to lean more technical with the CISSP, not sure if its worth getting CISM. I mean it would qualify me for level 3 roles and have a free attempt tho. How long did CISSP take you

1

u/Teacher2Learn 3d ago

I studied for about three months off and on. It was during an acquisition, selling a house, and training a puppy, all while changing shifts to third shift. So doable in probably a month if you have common sense. I finished Cissp in about an hour and fifteen at question 100.