CISM – Certified Information Security Manager is an advanced certification that indicates that an individual possesses the knowledge and experience required to develop and manage an enterprise information security (infosec) program. It is offered by a non-profit, independent association that advocates for professionals involved in information security, assurance, risk management, and governance. The certification is intended for information security managers, aspiring managers, or IT consultants who support infosec program management.

The examination is open to all individuals who possess an interest in information security management. All are encouraged to work toward and take the examination. Successful examination candidates are sent all information required to apply for certification with their notification of a passing score.
Application Criteria: A minimum of 5-years of professional information security management work experience – as described in the CISM job practice areas – is required for certification. The work experience for CISM certification must be gained within ten years preceding the application date for certification.
Candidates have 5-years from the passing date to apply for the certification. To maintain CISM certification, individuals must sustain an adequate level of knowledge and proficiency in the field of information systems security management, complete twenty continuing professional education (CPE) hours annually, and follow ISACA’s Code of Professional Ethics.
Conclusion: Multiple organizations proffer certification in CISM. They strive to help business technology professionals and their enterprises around the world realize the positive potential of technology.