CISSP and CISM are most sought by professionals.

More here

Any thoughts?

Interesting.  Working in the forensics industry, I haven't seen many people seeking CSFA certification.

Maybe once I'm done with my GCIA I'll look at CISM.  Either that, or go through GSEC, work on some gold papers and go for the GSE.  A few people in my department have been surprised by the loose definition of technical management experience for the CISM.  Does anyone have experience with this?

Things are still up in the air for this year.  I'll need to talk to my functional manager and the manager who is paying my billz to find out what their wants are.

For my part, I am surprised there is nothing about penetration testing (GPEN - although though GIAC,  OSCP, etc).

Is it me or it really looks like managers have answered the survey more than everybody else...

But I am fairly new in the field, so it is probably me...