Insights on CISM - Certified Information Security Manager and its Eligibility Criteria

CISM – Certified Information Security Manager is an advanced certification that indicates that an individual possesses the knowledge and experience required to develop and manage an enterprise information security (infosec) program. It is offered by a non-profit, independent association that advocates for professionals involved in information security, assurance, risk management, and governance. The certification is intended for information security managers, aspiring managers, or IT consultants who support infosec program management. 

A Brief Idea on the Course: The exam covers four content areas – information security management, risk management and compliance, security program development and management, and security incident management. To qualify for the exam, applicants must have five years of verified experience in the infosec field, with a minimum of three years of infosec management experience in three or more of the CISM content areas. Experience must be gained within ten years preceding the application date or within five years from the date of passing the exam. 

The examination is open to all individuals who possess an interest in information security management. All are encouraged to work toward and take the examination. Successful examination candidates are sent all information required to apply for certification with their notification of a passing score. 

Application Criteria: A minimum of 5-years of professional information security management work experience – as described in the CISM job practice areas – is required for certification. The work experience for CISM certification must be gained within ten years preceding the application date for certification. 

Candidates have 5-years from the passing date to apply for the certification. To maintain CISM certification, individuals must sustain an adequate level of knowledge and proficiency in the field of information systems security management, complete twenty continuing professional education (CPE) hours annually, and follow ISACA’s Code of Professional Ethics. 

Conclusion: Multiple organizations proffer certification in CISM. They strive to help business technology professionals and their enterprises around the world realize the positive potential of technology.