CISM.

An ISACA management-level certification for information security managers covering governance, risk, program development, and incident management across four domains. It belongs to the Compliance & Frameworks category of cybersecurity.

An ISACA management-level certification for information security managers covering governance, risk, program development, and incident management across four domains.

The Certified Information Security Manager (CISM) is issued by ISACA and is designed for security managers, program leads, and aspiring CISOs who need to align security with business strategy. The exam covers four domains: Information Security Governance, Information Security Risk Management, Information Security Program, and Incident Management. Candidates answer 150 multiple-choice questions over four hours and must score at least 450 on a 200 to 800 scale. CISM requires five years of work experience in information security management, with at least three years in three or more of the domains and the experience to be earned within the ten years prior to application or within five years of passing.

Defences for CISM typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Certified Information Security Manager.