Great and long artilce on the CISA and CISM. Worth a look.

http://www.computerworld.com/action/...8&pageNumber=1