Looking for some opinions on the difficulty of the CISM exam in comparison to the CISSP from folks who have both certs. I know there are 50 less questions on the CISM, and the official material is extremely dry. Any other insight would be appreciated as well.