The CISM and CAP credentials are the two newest security auditing credentials, offered by the ISACA and (ISC)², respectively. Strictly speaking, only the CISA or GSNA title would sufficiently demonstrate competences regarding both information technology and audit aspects with the CISA being more audit focused and the GSNA being more information technology focused.