# CISM

## AFFIRM YOUR EXPERTISE,
### ADVANCE YOUR CAREER.

Showcase your ability to design, implement, assess and manage an enterprise’s information security.

## BEST PROFESSIONAL CERTIFICATION PROGRAM  
—2018 SC Media Award

# CERTIFY FOR THE REAL-WORLD

## JOB OF AN EXPERT IN INFORMATION SECURITY MANAGEMENT.

More than 40,000 professionals have obtained ISACA’s Certified Information Security Manager  
(CISM) certification since it was introduced in 2002. Named Best Professional Certification  
Program in the 2018 SC Media Awards*, the certification affirms the proven, multifaceted expertise  
of its holders, and their ability to understand and articulate complex and challenging security  
management issues that can significantly impact enterprise success.

### The first step to becoming CISM certified
The first step to becoming CISM certified is to take and pass the CISM certification exam, consisting of 150 questions covering 4 job practice domains:

**1 INFORMATION SECURITY GOVERNANCE**—
affirms the expertise to establish and/or maintain an 
information security governance framework (and 
supporting processes) to ensure that the information
security strategy is aligned with organizational goals 
and objectives.

Domain 1 confirms your ability to develop and oversee
an information security governance framework to 
guide activities that support the information security 
strategy.

**2 MANAGING INFORMATION RISK**—
proficiency in this key realm denotes advanced ability to manage 
information risk to an acceptable level, in accordance 
with organizational risk appetite, while facilitating the 
attainment of organizational goals and objectives.

Domain 2 demonstrates expertise in classifying 
information assets to ensure measures taken to 
protect those assets are proportional to their 
business value.

**3 DEVELOPING AND MANAGING AN INFORMATION SECURITY PROGRAM**—
establishes ability to develop and maintain an information security 
program that identifies, manages and protects the 
organization’s assets while aligning with business 
goals.

Domain 3 attests to ability to ensure the information 
security program adds value while supporting 
operational objectives of other business functions 
(human resources, accounting, procurement, IT, etc.).

**4 INFORMATION SECURITY INCIDENT MANAGEMENT**—
validates capacity to plan, establish and manage detection, investigation, response and 
recovery from information security incidents in order 
to minimize business impact.

Domain 4 establishes your skills in accurately 
classifying and categorizing information security 
incidents and developing plans to ensure timely 
and effective response.

## SEE WHY CISM IS THE GLOBALLY ACCEPTED STANDARD OF ACHIEVEMENT.

In a world where enterprise success is increasingly dependent on information systems and  
information technology, the trust customers, clients, employees and other stakeholders have for  
an enterprise can quickly dissipate in the face of a data security breach. As the growing number  
of high-profile breaches demonstrates, information security failures can result in significant  
damage to an enterprise’s bottom line as well as its reputation. Demand for skilled information  
security management professionals continues to rise, and the uniquely management-focused  
CISM certification is the globally accepted standard of achievement in this area.

More and more enterprises and government agencies expect, and even require, their information security  
professionals to hold the CISM certification.

¬  The American National Standards Institute (ANSI)  
has accredited the CISM certification program under  
ISO/IEC 17024:2012.

¬ *SC Media* named CISM the Best Professional  
Certification Program in 2018.

¬  CISM ranks among the highest-compensated  
certifications worldwide in *Certification Magazine’s* Salary Survey 2018, with an average global salary of  
U.S. $120,410.

¬  CISM was named one of the Best IT Security  
Certifications by TechWorm.

Learn more at  
WWW.ISACA.ORG/CISM

## BUILD YOUR CONFIDENCE ON EXAM DAY
Gear up for your CISM certification exam with the most comprehensive, up-to-date study materials and training designed to fit your study needs and schedule.

CREATE YOUR OWN COMBINATION, CHOOSE FROM:
- Exam Prep Virtual Instructor-Led Training Courses
- Online, On-Demand Review Courses
- Print or Downloadable Review Manuals (available in English and other languages)
- Review Questions, Answers & Explanations Database (12-Month Subscription)

Learn more at:  
WWW.ISACA.ORG/CISM

## TAKE YOUR CISM EXAM ON YOUR SCHEDULE
Enjoy the convenience of choosing a morning or afternoon exam time at testing facilities around the globe on 300+ test dates throughout the year.

Register for and schedule your exam now:  
WWW.ISACA.ORG/CISM

## ISACA CONNECTS YOU TO WHAT’S NEXT
Connecting more than 165,000 professionals in over 180 countries, ISACA® is a global leader in certification, training and education.  
We provide knowledge, standards, networking, and career development for information systems audit, control, security, cybersecurity, risk, privacy and governance professionals.  
We advance and validate business-critical skills and knowledge through our globally respected CISM and other certifications.

ISACA®  
INTERNATIONAL HEADQUARTERS  
1700 E. Golf Road | Suite 400  
Schaumburg, IL 60173 | USA

isaca.org

© 2019 ISACA. All Rights Reserved.