Certified Information Security Manager 1999938 226062366 2008-07-16T17:37:46Z 85.156.230.157 {{Refimprove|date=June 2007}} '''Certified Information Security Manager''' ('''CISM''') is a certification for [[information security management|information security managers]] awarded by the [[Information Systems Audit and Control Association]] (ISACA). To gain the certifications, individuals must pass a written examination and have at least five years of [[information security]] experience with a minimum three years of [[information security management]] work experience in particular fields. The intent of the certification is to provide a common body of knowledge for information security management. The CISM focuses on [[information risk management]] as the basis of information security. It also includes material on broader issues such as how to [[information security governance|govern information security]] as well as on practical issues such as developing and managing an information security program and [[incident management|managing incidents]]. The point of view in the certification is that of widely accepted cross-industry best practices, where information security gets its justification from business needs. The implementation includes information security as an autonomous function inside wider [[corporate governance]]. The CISM certifications tends to be sought after by both [[Certified Information System Auditor|CISA]] and [[CISSP]] certification communities. ISACA created the CISM to help foster a better fusion between IT auditing and information security perspectives. In principle, the CISM certification is related in nature to the Information Systems Security Management Professional certification from [https://www.isc2.org/cgi-bin/index.cgi International Information Systems Security Certification Consortium]. In 2005, the [[United States Department of Defense]] listed CISM, CISA and CISSP as "approved" certifications for its "Information Assurance Workforce Improvement Program".<ref>[http://www.dtic.mil/whs/directives/corres/pdf/857001m.pdf DoD 8570.01-M, December 19, 2005<!-- Bot generated title -->]</ref> ==Knowledge Domains== The CISM requires demonstrated knowledge in five functional areas of [[Information Security]]<ref>Peltier, Thomas R., Peltier, Justin: ''Complete Guide to CISM Certification.'' Auerbach Publications, 2007. ISBN 0-8493-5356-4</ref>: * [[Information security governance]] * [[Information risk management]] * [[Information security program]] development * [[Information security program]] management * [[Information security incident management|Incident management]] ==See also== * [[Certified Information System Auditor]] (CISA) * [[Certified Information Systems Security Professional]] (CISSP) * [[Certified Expert Penetration Tester | CEPT (Certified Expert Penetration Tester)]] * [[Information Security Governance]] * [[Information Security Management]] * [[Information Systems Security Management Professional]] (ISSMP) * [[(ISC)²]] * [[IT Governance|IT Governance Frameworks]] ==References== {{Reflist}} ==External links== *[http://www.isaca.org/Template.cfm?Section=CISM_Certification&Template=/TaggedPage/TaggedPageDisplay.cfm&TPLID=16&ContentID=4528 CISM Certification - Information Systems Audit and Control Association] [[Category:Professional certification]] [[Category:Data security]] {{comp-sci-stub}} [[de:Certified Information Security Manager]] [[es:CISM]] [[fr:Certified Information Security Manager]] [[id:CISM]] [[pt:Certified Information Security Manager]]