CISM Awareness Brochure.pdf

CISM

AFFIRM YOUR EXPERTISE,

ADVANCE YOUR CAREER.

Showcase your ability to design, implement, assess and manage an enterprise’s information security.

BEST PROFESSIONAL CERTIFICATION PROGRAM

—2018 SC Media Award

CERTIFY FOR THE REAL-WORLD

JOB OF AN EXPERT IN INFORMATION SECURITY MANAGEMENT.

More than 40,000 professionals have obtained ISACA’s Certified Information Security Manager
(CISM) certification since it was introduced in 2002. Named Best Professional Certification
Program in the 2018 SC Media Awards*, the certification affirms the proven, multifaceted expertise
of its holders, and their ability to understand and articulate complex and challenging security
management issues that can significantly impact enterprise success.

The first step to becoming CISM certified

The first step to becoming CISM certified is to take and pass the CISM certification exam, consisting of 150 questions covering 4 job practice domains:

1 INFORMATION SECURITY GOVERNANCE— affirms the expertise to establish and/or maintain an information security governance framework (and supporting processes) to ensure that the information security strategy is aligned with organizational goals and objectives.

Domain 1 confirms your ability to develop and oversee an information security governance framework to guide activities that support the information security strategy.

2 MANAGING INFORMATION RISK— proficiency in this key realm denotes advanced ability to manage information risk to an acceptable level, in accordance with organizational risk appetite, while facilitating the attainment of organizational goals and objectives.

Domain 2 demonstrates expertise in classifying information assets to ensure measures taken to protect those assets are proportional to their business value.

3 DEVELOPING AND MANAGING AN INFORMATION SECURITY PROGRAM— establishes ability to develop and maintain an information security program that identifies, manages and protects the organization’s assets while aligning with business goals.

Domain 3 attests to ability to ensure the information security program adds value while supporting operational objectives of other business functions (human resources, accounting, procurement, IT, etc.).

4 INFORMATION SECURITY INCIDENT MANAGEMENT— validates capacity to plan, establish and manage detection, investigation, response and recovery from information security incidents in order to minimize business impact.

Domain 4 establishes your skills in accurately classifying and categorizing information security incidents and developing plans to ensure timely and effective response.

SEE WHY CISM IS THE GLOBALLY ACCEPTED STANDARD OF ACHIEVEMENT.

In a world where enterprise success is increasingly dependent on information systems and
information technology, the trust customers, clients, employees and other stakeholders have for
an enterprise can quickly dissipate in the face of a data security breach. As the growing number
of high-profile breaches demonstrates, information security failures can result in significant
damage to an enterprise’s bottom line as well as its reputation. Demand for skilled information
security management professionals continues to rise, and the uniquely management-focused
CISM certification is the globally accepted standard of achievement in this area.

More and more enterprises and government agencies expect, and even require, their information security
professionals to hold the CISM certification.

¬ The American National Standards Institute (ANSI)
has accredited the CISM certification program under
ISO/IEC 17024:2012.

¬ SC Media named CISM the Best Professional
Certification Program in 2018.

¬ CISM ranks among the highest-compensated
certifications worldwide in Certification Magazine’s Salary Survey 2018, with an average global salary of
U.S. $120,410.

¬ CISM was named one of the Best IT Security
Certifications by TechWorm.

Learn more at
WWW.ISACA.ORG/CISM

BUILD YOUR CONFIDENCE ON EXAM DAY

Gear up for your CISM certification exam with the most comprehensive, up-to-date study materials and training designed to fit your study needs and schedule.

CREATE YOUR OWN COMBINATION, CHOOSE FROM:

Learn more at:
WWW.ISACA.ORG/CISM

TAKE YOUR CISM EXAM ON YOUR SCHEDULE

Enjoy the convenience of choosing a morning or afternoon exam time at testing facilities around the globe on 300+ test dates throughout the year.

Register for and schedule your exam now:
WWW.ISACA.ORG/CISM

ISACA CONNECTS YOU TO WHAT’S NEXT

Connecting more than 165,000 professionals in over 180 countries, ISACA® is a global leader in certification, training and education.
We provide knowledge, standards, networking, and career development for information systems audit, control, security, cybersecurity, risk, privacy and governance professionals.
We advance and validate business-critical skills and knowledge through our globally respected CISM and other certifications.

ISACA®
INTERNATIONAL HEADQUARTERS
1700 E. Golf Road | Suite 400
Schaumburg, IL 60173 | USA

isaca.org

© 2019 ISACA. All Rights Reserved.