I am just getting into the cyber security realm and would like to know if you have any recommendations for study resources I should look into to expand my knowledge base in the cyber risk management side. As a second part are there any certifications that are favored over others i.e. CISSP, or others.