Certified Information Security Manager: Difference between revisions
template, not a stub |
|||
| Line 20: | Line 20: | ||
* [[Information security program]] management |
* [[Information security program]] management |
||
* [[Information security incident management|Incident management]] |
* [[Information security incident management|Incident management]] |
||
DEAR SANTA, YOU A BI TCH A$S NIGG@. I HEARD YOU HIRED EXTRA SECURITY TO PROTECT YOU. THAT'S A BI TCH MOVE. IM COMING FOR THAT A$S. |
|||
==See also== |
==See also== |
||
Revision as of 16:18, 9 November 2009
 | This article needs additional citations for verification. (June 2007) |
Certified Information Security Manager (CISM) is a certification for information security managers awarded by the Information Systems Audit and Control Association (ISACA). To gain the certifications, individuals must pass a written examination and have at least five years of information security experience with a minimum three years of information security management work experience in particular fields.
The intent of the certification is to provide a common body of knowledge for information security management. The CISM focuses on information risk management as the basis of information security. It also includes material on broader issues such as how to govern information security as well as on practical issues such as developing and managing an information security program and managing incidents.
The point of view in the certification is that of widely accepted cross-industry best practices, where information security gets its justification from business needs. The implementation includes information security as an autonomous function inside wider corporate governance.
The CISM certifications tends to be sought after by both CISA and CISSP certification communities. ISACA created the CISM to help foster a better fusion between IT auditing and information security perspectives.
In principle, the CISM certification is related in nature to the Information Systems Security Management Professional certification from the International Information Systems Security Certification Consortium.
In 2005, the United States Department of Defense listed CISM, CISA and CISSP as "approved" certifications for its "Information Assurance Workforce Improvement Program".[1]
Knowledge Domains
The CISM requires demonstrated knowledge in five functional areas of Information Security[2]:
- Information Security Governance
- Information risk management
- Information security program development
- Information security program management
- Incident management
DEAR SANTA, YOU A BI TCH A$S NIGG@. I HEARD YOU HIRED EXTRA SECURITY TO PROTECT YOU. THAT'S A BI TCH MOVE. IM COMING FOR THAT A$S.
See also
References
- ^ DoD 8570.01-M, December 19, 2005
- ^ Peltier, Thomas R., Peltier, Justin: Complete Guide to CISM Certification. Auerbach Publications, 2007. ISBN 0-8493-5356-4