Top Certifications in CyberSecurity

[@narycyber3064]

Wow, yet another amazing video! Your breakdown of certs like CRISC, CISA, and CISM is a real eye-opener. Your experience in the GRC space truly shines through, and your recommended entry-level certifications are a gem for career starters. Your hindsight on the path you'd take is beyond valuable. Thanks for the extra resources you've shared as well - you're always going above and beyond!

[@justusjuvenary4679]

Incredibly insightful video! Your guidance on GRC certifications like CC, CRISC, CISA, and CISM is pure gold.

[@wholesalingtony1588]

Very informative video.

[@JustinJ.]

Video's getting better and better mate, another top one!

[@fatimanawaya6567]

Great video,very helpful to those who are looking for a career path,clearly you have a good heart where you want to support everyone to successes. Thank you 😊

[@lightswitch6854]

All useful for newbies and the more experienced.

[@bilals8878]

ive done CC and google cyber security. lots of overlap but google does go more in depth with a ton of labs and they actually have you do a lot of hands-on. one thing i didnt like, the videos all seem like apple advertising, so wasnt a fan of them but mute and 2x got the job done because the transcripts were available.

[@jay12120]

yoo i'm like a week away from finishing the google cyber cert. what cert are you planning to do next or do you plan to try to get a job now?

[@1man2futuremen]

I was wondering if you have any input on OCEG certifications: GRCP, GRCA, IPMP, IDPP, IAAP, and their other certifications in development?

[@cyber_salih]

I have not really seen them listed in job descriptions but I will admit I have not looked into OCEG in any detail. However, on the face of it - the website - it looks good. I do also like their GRC capability model PDF - I read through it the other week and it seemed sensible. Overall, they seem to be teaching the right knowledge and skills so is a good option.

[@1man2futuremen]

Thank you for your response. I’ve been seeing them show up in jobs I have applied to recently, but I was taking their courses before I saw these. I’ve completed several certifications and have learned a lot in their program. Makes me feel grounded in the concepts, not just learning a framework like many of the training programs I’ve gone through. It seems like a great start to have a GRC certification, if you don’t have the experience to qualify for ISACA certification. Right now they have 5 available and 5 more on the way; also many perks to being a member. With no one really reviewing them and your years of experience, could make a great video or couple of videos.

[@cyber_salih]

​​⁠thank you, yeah will add it to the content schedule and do something in the near future - appreciate you pointing it out I will take a deeper look into them.

[@AnuShrivastav-zw6ls]

I have 5 years of Network Security exp. On firewall/proxy/Antivirus n all. I want to go in mngmt but still keep in touch with cybersecurity concepts. Which certification is good and easy for me out of CISM or CRISC ?

[@cyber_salih]

Both are good CISM/CISSP is better for management roles and CRISC is better for risk roles

[@ichigo8000]

Since you're someone in the space, maybe you can help. I've been under the impression that it's probably just what this year has been like in tech in the U.S. I'm someone VERY interested in GRC for some time now. I have a Bachelor's in IT, 2 years IT Helpdesk Experience, Security+, CISA, CRISC (passed, but need experience). I also took Gerald Auger's GRC Masterclass after the certs to maximize my applied knowledge of what I learned with the certs through his teachings and the projects in the course (Practice audits, risk assessments, policy creation, and security awareness content creation) and I keep up with the space consistently. Any tips to help maximize my chances of getting into GRC space?

[@cyber_salih]

I talk about this on my latest video: kzbin.info/www/bejne/Y6WXqKuEZ8eNlassi=WFdz7Uyo3xfzw8Nt To me it sounds like you have the skills, the knowledge, and the certifications - that’s not the reason why you’re not getting in. It seems like you need to focus on “marketing yourself”. You have to get a good linked in profile, optimise it, and post regularly. Also, refine your CV, your cover letters, your whole application process. Honestly, just spend time looking at how to improve your CV, write custom cover letters for every application you make, also connect with people on LinkedIn and spend time posting regularly, reaching out, write about things you’ve learned and show your knowledge and be more “discoverable”. Yes, the market is not the best but there are still many unfilled positions.

[@ichigo8000]

@@cyber_salih Thanks for the advice man, I really appreciate it. I'll also check out the video.

[@jay12120]

Should an entry level person get the crisc before going for the cisa, or just go straight for the cisa?

[@cyber_salih]

CRISC is more for risk management roles, CISA is more auditing roles. Both are good but are different, I personally think CISA is better for getting a job because more roles are available in the audit space, but that doesn’t mean CRISC isn’t good. CISA can be done at entry level (I did it) just study hard and you’ll pass.

[@jay12120]

@@cyber_salih got it. Thanks!!

[@TheLORDNIGHTSHIELD]

Neither CRISC nor CISA are for beginners. They both require experience. CRISC itself is for people in Risk Management. This is not a beginner level thing. Plus you should have experience in different domains, and be able to Prove it, in case you application would go through Audit of Isaca. If you want something for beginners - go for CC/A+/Security+ or maybe for SSCP. You may pass exam, may get certification, even somehow manage to pass experience requirement, but in interview, you are going to be expected a knowledge, and will be asked appropriate questions.

[@cyber_salih]

@@TheLORDNIGHTSHIELD I would politely disagree, yes you are right you wouldn’t be certified until you pass the experience requirements etc. But you would still be a CISA (or CRISC) holder. I know many people who have done CISA/CRISC early on in their career and have benefited from being a holder and got the experience at a later date (including myself). Being a certification holder is valuable in many employers eyes because you’ve still studied and passed the exam.

[@jay12120]

@@TheLORDNIGHTSHIELD makes sense. Thanks! I'm pursuing the sec + now

[@Cyber2a]

Lol, you went from the CC by ISC to the next being the CRISC which requires at least 3 years in a particular field.. You lost me there..

[@cyber_salih]

You can be a holder of ISACA certifications or an associate of ISC2 - I.e. passed the exam without getting the experience requirement. You get 10 years to get the experience requirements to become fully certified for ISACA certs. Still very valuable, teaches you a lot and can help land you a job - it’s may seem unconventional but many do it.