I’ve protected most of one's thoughts in my preceding replies to other reviews, but briefly, in case you don’t know IT or audit, you’d have to master equally to make it happen audit, which would be tricky.The CISSP isn't going to call for security administration expertise; the CISM requires 3 many years of stability management