CISM Certification Overview

Become a CISM

The Certified Information Security Manager® (CISM®) certification program is developed specifically for experienced information security managers and those who have information security management responsibilities. The CISM certification is for the individual who manages, designs, oversees and/or assesses an enterprise's information security (IS). The CISM certification promotes international practices and provides executive management with assurance that those earning the designation have the required experience and knowledge to provide effective security management and consulting services. Individuals earning the CISM certification become part of an elite peer network, attaining a one-of-a-kind credential. The CISM job practice also defines a global job description for the information security manager and a method to measure existing staff or compare prospective new hires.

CISM Receives ANSI Accreditation

CISM Named Finalist for SC Magazine's Best Certification Program

For information on DoD 8570.1 and what ISACA is doing to meet the needs of DoD information assurance professionals, click here.

Worldwide Recognition

Although certification may not be mandatory for you at this time, a growing number of organizations are requiring or recommending that employees become certified. To help ensure success in the global marketplace, it is vital to select a certification program based on universally accepted information security management practices. CISM delivers such a program.

CISM Information

• The CISM Exam
• Exam Study Aids
• Exam Review Courses
• Requirements for CISM Certification
• Application & Maintenance
• Frequently Asked Questions
• CISM Certification Recognitions
• Certification - Your Passport to Success

• 2009 CISM Program Presentation (PPT, 374K)

"The CISSP certification long ago made the gold standard, but infosec execs are now wisely adding the new CISM certification. Why the push? The advanced-level CISM better addresses the interdependency between business needs and IT security by focusing on risk management and security organizational issues." 
-- David Foote, Foote Partners, LLC, SC Magazine, July 2005