IT Manager to CISO

[olufemimogaji () gmail com]

Hi all,

I'm currently the de facto IT manager for a small IT services firm. The nature of our business requires that we follow 
PCI standards as per logical security. Here's the thing, the CISO is leaving next month, and I've been told I'll be 
taking his position. I already have a lot of exposure to info sec, I have a CCNP (the former version with ISCW) and a 
I'm an MCP (Active Directory for WS 2008). What I need to know is what cert I should go out there and get to make me 
more cemented in this new CISO role, at least to keep the auditors happy, as they sometimes like to question your 
competence. The outgoing CISO, even though he was trained by some of our partners, had NO certs, and this exposed him 
to uncomfy questions from hard nosed auditors. Security+ or CISSP exam? Or any others? Any form of guiding light will 
be highly appreciated.

Regards,

Femi M.




Sent from my BlackBerry® Smartphone



Sent from my BlackBerry® Smartphone