Certified Information Security Manager (CISM)
Definition - What does Certified Information Security Manager (CISM) mean?
A Certified Information Security Manager (CISM) is a professional with a specific kind of management-focused certification from ISACA (previously, the Information Systems Audit and Control Association), an independent non-profit that promotes best practices for IT management. The Certified Information Security Manager certification helps a career professional to demonstrate knowledge and experience with international security practices and a skill set focused on the protection of sensitive data.
Techopedia explains Certified Information Security Manager (CISM)
In a broader sense, the issues that the CISM certification addresses are a profound part of modern businesses. Information security is paramount to nearly any kind of business. Companies need a way to safeguard all of their proprietary information, whether it’s customer data, product and sales data or business intelligence data. They need to protect these kinds of information from a full range of cyberattacks, natural disasters and other emergencies.
To this end, the CISM certification shows that an individual can look at information security goals within the context of the business’s other objectives, and that someone can do the necessary work in setting up comprehensive security programs that work for a business. Companies use resources like the CISM certification to make sure that they have the right kind of talent on board to establish competitive information security programs.
The CISM test uses a 200- to 800-point scale where test takers must achieve at least 450. There are several exams throughout the year, and applicants must register for a specific day and site. CISM tests are not offered online. The CISM certification can be renewed on a three-year basis with continuing education and fees.