CISM explained

These are the four key domains that are covered in a CISM certification course:

1. Information Security Governance: The first domain covers the essentials of Information Security Governance, including how to manage third party relationships, information security metrics and how to develop and implement a strategy.
2. Information Risk Management and Compliance: The second domains teaches learners how to assess, monitor and manage risks, as well as an understanding of asset management and recovery time objectives.
3. Information Security Program Development and Management: The third domain focuses on the development and management of information security programs, including how to develop a framework and create a roadmap. It also looks at how to measure operational performance and the metrics behind your security programs.
4. Information Security Incident Management: The final domain focuses on Incident Management and will cover business continuity and recovery procedures in the worst-case scenarios. Delegates will also learn about ISACA’s code of professional ethics and wider considerations around laws, regulations and ethics.

Demand for skilled security professionals is ever-increasing, and CISM is accepted as the universal standard to strive towards within the world of information security. It is a qualification that represents expertise and commitment to the field.

Those who hold a CISM certification are often identified as the most certified professionals in information security, and those that can recognise the role that security programmes play in the larger goals of an organisation.

It is considered to be an essential certification for IT and security professionals.

CISM empowers learners with the skills to design, deploy and manage security architecture within a business. It ensures that learners are equipped to manage on-going security programmes, as well as essential compliance and governance framework.

Enterprises and government agencies increasingly expect their IT professionals to hold a CISM certification. It is a globally recognised professional requirement in the IT security domain and one that is suitable to a range of IT and security roles.

To gain a CISM certification, a learner must:

• Pass the CISM examination
• Submit an application for CISM certification
• Pay an application fee directly to ISACA
• Adhere to the Code of Professional Ethics
• Dedicate to the Continuing Professional Education Program
• Compliance with the Information Security Standards

CISM is suitable for a number of different roles in IT and cyber security, including but not limited to: security consultants and managers, IT directors and managers, security auditors and architects, security systems engineers, chief information security officers, compliance officers and information security managers.