Professional certifications

Answer: Considering your stated experience, I'd suggest you to consider certifications related to ITIL framework (e.g., foundation, expert and master) or ISO 20000 standard (lead auditor or lead implementer), because you can use a lot of your background as basis to achieve such certifications.

If you are also interested in basic security training I suggest you to take a look at our 27001 Foundations course (https://advisera.com/training/iso-27001-foundations-course/).

These articles will provide you further explanation about ITIL and ISO 20000 certifications:
- ITIL Certification Path – list of all available ITIL trainings, exams and certificates https://advisera.com/20000academy/knowledgebase/itil-certification-path-list-of-all-available-itil-trainings/
- Process to obtain ISO/IEC 20000 certification: Companies and individuals https://advisera.com/20000academy/knowledgebase/iso-20000-certification-the-process-of-obtaining-a-certifica/
- How personal certificates can help your company’s IT Service Management https://advisera.com/20000academy/blog/2017/04/18/how-personal-certificates-can-help-your-companys-it-service-management/

Thank you so much for your explanation. Can you please explain on the below

CISA, CISM, CRISC, CGEIT (which needs to do first in terms of certification)

Each one of these certifications has a different target group and purpose, so there is no specific order to pursue them (there is no need to pursue all of them at all):
- CISA (Certified Information Systems Auditor) aims for those who audit, control, monitor and assess an organization’s information technology and business systems.
- CISM (Certified Information Security Manager) is suitable for individuals who design, build and manage enterprise information security programs (e.g., information security managers)
- CRISC (Certified in Risk and Information Systems Control) is for IT professionals that seek a career as liaison between IT risk management and enterprise risk management.
- CGEIT (Certified in the Governance of Enterprise IT) is the best option for professionals who work on enterprise IT governance.

For more information, please consult this link: https://www.isaca.org/CERTIFICATION/Pages/default.aspx