This is a question that arises in many information security and business analysis professional’s mind. Both IIBA CCA and ISO 27001 deal with information security. So, which one should pursue? 

I am among very few BA professionals who have done both the certifications. I consulted more than 10 clients to implement ISO 27001 in their organizations and it was indeed a great learning process. I thoroughly enjoyed my ISO 27001 Lead Auditor training.

Similarly, I took IIBA CCA certification few months back and again was pleasantly surprised about new aspects those I learnt as part of my CCA preparations process.

Let's do a comparison between the 2 certifications below.

IIBA-CCA Recommended -

• Business analysts
• To become enterprise / strategic level BA
• If your organization has IIBA CCA certifications as part of the competency framework
• Part of BA Center of Excellence/BA Competency team
  
  

ISO 27001 LA Recommended –

• Members of Organizational Infosec team
• If your organization has ISO 27001 LA certifications as part of the competency framework
• If your organization has implemented or plan