The CISM security certification is ideal for mid-level and advanced-level cybersecurity professionals with prior information security experience. Because this certification empowers professionals to advance in managerial positions and navigate challenges in information security, the CISM course is recommended for the following roles:

• Information security managers  
• Information security consultants  
• Chief information officers (CIOs) 
• Chief information security officers (CISOs)

What are the CISM certification requirements? Becoming a CISM entails submitting verified evidence of the following requirements: 

• A minimum of five years of information security work experience
• A minimum of three years of information security management work experience in three or more of the job practice analysis areas

The work experience must be gained within the 10-year period preceding the application date for certification or within five years from the date of originally passing the exam.  

• Information security governance
• Information security risk management
• Information security program
• Incident management

• Enterprise Governance Overview
• Organizational Culture, Structures, Roles and Responsibilities
• Legal, Regulatory and Contractual Requirements
• Information Security Strategy
• Information Governance Frameworks and Standards
• Strategic Planning
  
  
  
  

• Risk and Threat Landscape
• Vulnerability and Control Deficiency Analysis
• Risk Assessment, Evaluation and Analysis
• Information Risk Response
• Risk Monitoring, Reporting and Communication
  
  
  

• IS Program Development and Resources
• IS Standards and Frameworks
• Defining an IS Program Road Map
• IS Program Metrics
• IS Program Management
• IS Awareness and Training
• Integrating the Security Program with IT Operations
• Program Communications, Reporting and Performance Management

• Incident Management and Incident Response Overview
• Incident Management and Response Plans
• Incident Classification/Categorization
• Incident Management Operations, Tools and Technologies