I'm a seasoned PMP with 12 years of app dev, infrastructure, risk management, and process improvement experience. I'd like to get a security certification and wonder how difficult it is to pass? Also what is the best way to market both the PMP and CISSP as a consultant? Hourly rates?