Security Basics: Re: Re: Security Auditing ?

[mordawdz () gmail com]

CISSP and CISA should not be prerequisites to upper-management positions at all.  Experience is.  Not certifications.

Neither CISSP or CISA will give you the knowledge you need to perform management duties and take the right security 
calls.  Only experience will.