CISM
Prepare for the Certified Information Security Manager credential from ISACA, built around managing and governing security.
Logo shown to identify the credential owner. No partnership or endorsement is implied.
CISM: what it is and why it matters
CISM is a management-focused credential for people who design, direct and oversee an enterprise information security programme. It is owned and awarded by ISACA.
This course area helps you understand the subject matter: how security is governed, how risk is managed, how a security programme is built and run, and how incidents are handled.
Built for the people who carry the work
- Information security managers and heads of security
- Risk and compliance managers with security responsibility
- IT managers moving into security leadership
- Consultants who advise security leaders
What you will be able to do
- Explain how information security governance supports business goals
- Describe an information security risk management approach
- Outline how a security programme is developed and managed
- Describe how incidents are prepared for, handled and reviewed
- Present security matters in business terms
Subject outline
- 01
Information security governance
- 02
Information security risk management
- 03
Information security programme
- 04
Incident management
How it supports real work
Presenting security risk and investment cases to leadership
Structuring a security programme with owners, measures and reporting
Coordinating incident roles between security, IT and the business
Training, examination and certification are different steps
Training, the exam and the credential are different steps, and ISACA decides who is certified. ISACA publishes the exam content areas, the experience requirements and the renewal rules.
- The credential is awarded by ISACA, not by a training provider.
- ISACA requires candidates to demonstrate experience as part of the application. Check its current requirements.
- Training supports exam preparation. It does not award the credential.
Certification bodies set and can change their own exam, eligibility and renewal rules. The details below are what the body publishes; we confirm the current position with you before you enrol.
What is confirmed, and what people ask
Delivery information
Delivery details for this course have not been confirmed for publication, so none are listed here. Course length, schedule, language, delivery format and fees are confirmed per enquiry. Certification bodies set their own exam and eligibility rules, and we confirm the route to any certificate before you enrol.
Enquire About This CourseFrequently asked questions
Who awards the CISM credential?
ISACA. Training providers prepare you for the subject matter but do not award the credential.
What does the credential cover?
ISACA lists four content domains: information security governance, information security risk management, information security programme, and incident management.
How is it different from CISA?
CISA centres on auditing and assurance of information systems. CISM centres on managing and governing an information security programme.
Related courses
Related Valtrenix services
Request course information
Tell us who the training is for and what you want to achieve. We reply with confirmed details only, including what is currently available for CISM.
- Individual and team training enquiries welcome
- No fees, dates or formats are published until confirmed
- We confirm the certification route before you enrol