What is a CISM (Certified Information Security Manager)?
A Certified Information Security Manager focuses on information risk management as the basis of security. This professional is also involved with the management of information security processes, development and management of an information security program, and management of incidents.
This certification addresses internationally accepted industry best practices. A CISM will apply these practices according to business needs to provide information security within the appropriate corporate governance. The CISM represents the intersection between IT auditing and overall information security processes and needs.
The CISM identifies five knowledge areas in Information Security:
- Information Security Governance
- Information Risk Management
- Information Security Program Development
- Information Security Program Management
- Incident Management





