Passed the CISM yesterday! Hearing others’ stories was encouraging, so here’s mine.
I took a 4-day Tasting Camp with zero preparation. That got me the study materials (digital book, QAE) and a live trainer in an online course.
I don’t feel I got much out of the course aside from general test taking tips, and by mid week I was just hoping we’d be done sooner so I could work more on the QAE. By the end of the course, I didn’t feel prepared enough at all. I just felt more aware of all the things I didn’t know which was helpful, and I had to re-organize my notes from the training because the trainer was all over the place and wasn’t teaching very linearly, but I suppose that also helped.
The next week and a half, I solely worked on the QAE and watched the Pete Zerner videos. I got the most value out of this and passed my test on Thursday.
Having worked in cyber security for over 10 years, I found the information on the CISM eye-opening. To see the bigger picture of what I’ve been doing all this time, I immediately saw areas to improve our program and began putting them into practice, a very weak after the training camp.
Next year when I take the CISSP, I intend to watch all the Pete Zerner videos in advance. I would probably still take a Boot Camp afterwards, since the company would pay for it and I would be able to ask any residual questions, but I think the prep work of the videos would be the best use of my time.