All CISSP Comparisons

CISM

Both target management-track security professionals. CISM (ISACA) leans into governance and program management; the CISSP keeps broader technical breadth.

CRISC

The CRISC (ISACA) is focused IT risk management across four domains. The CISSP is broader security across eight.

CCISO

The CCISO (EC-Council) is built specifically for CISOs with steep experience demands. The CISSP is the senior credential most CISOs also hold.

PMP

The PMP (PMI) certifies project management; the CISSP certifies security. They meet in security program leadership roles.

Audit, Governance & Privacy

CISA

The CISA (ISACA) is the dominant IT audit credential. The CISSP certifies the practitioners whose work auditors examine.

CGRC

ISC2's own GRC specialist, strongest in RMF and federal authorization work, with a one-year CISSP experience waiver.

ISO 27001 Lead Auditor

The Lead Auditor certifies ISMS auditing against the world's dominant security standard, strongest in EMEA and consulting markets.

CIPP

The CIPP (IAPP) certifies privacy law, one jurisdiction per designation. A different field that borders security rather than competing with it.

Cloud Security

CCSP

ISC2's vendor-neutral cloud security flagship. The standard specialization layer on top of the CISSP.

CCSK

The CSA's knowledge certificate: $445, open book, never expires. A cloud on-ramp rather than a professional certification.

AWS Security – Specialty

AWS's deepest security credential. Platform-specific depth that pairs with the CISSP and carries a one-year experience waiver.

Offensive Security

CEH

The CEH (EC-Council) covers ethical hacking concepts. The CISSP covers the defensive and governance side of the same battlefield.

OSCP

The OSCP (OffSec) is the hands-on penetration testing credential. Maximum technical depth versus maximum senior breadth.

Technical Specializations

SC-200

Microsoft's security operations analyst certification. Platform-specific SOC skills versus vendor-neutral seniority.

SC-100

Microsoft's Cybersecurity Architect Expert exam. The senior credential of the Microsoft track, with a CISSP waiver attached.

CCNP Security

Cisco's professional-level network security certification. Deep network security engineering versus broad senior judgment.

CySA+

CompTIA's security analyst certification. The mid-career rung between Security+ and SecurityX, with a one-year CISSP waiver.

AI Governance

AAIA

ISACA's Advanced in AI Audit credential, for audit professionals covering AI systems.

AAISM

ISACA's Advanced in AI Security Management credential, layering AI risk onto security management.

AIGP

The IAPP's AI Governance Professional, riding the EU AI Act wave. A governance extension, not a security credential.

Entry & Foundational