CISM Certication

The Certified Information Security Manager® (CISM®) certification program is developed specifically for experienced information security managers and those who have information security management responsibilities. The CISM certification is for the individual who manages, designs, oversees and/or assesses an enterprise’s information security (IS). The CISM certification promotes international practices and provides executive management with assurance that those earning the designation have the required experience and knowledge to provide effective security management and consulting services. Individuals earning the CISM certification become part of an elite peer network, attaining a one-of-a-kind credential. The CISM job practice also defines a global job description for the information security manager and a method to measure existing staff or compare prospective new hires.

The CISM Exam

The CISM exam covers five information security management areas, each of which is further defined and detailed through task and knowledge statements. These areas and statements were developed by the CISM Certification Board and represent a job practice analysis of the work performed by information security managers as validated by prominent industry leaders, subject matter experts and industry practitioners. It is offered twice a year in June and December. It consists of 200 multiple-choice questions, administered during a four-hour session in multiple locations For more information, go to CISM Review Course.

 For more informatin on becoming a CISM, see www.isaca.org.