CISM Certification and training: What you need to know
The CISM (Certified information security manager) certification introduced by ISACA is a globally accepted standard of achievement in cybersecurity management. ISACA is a global association that focuses on IT professionals or IT governance with knowledge, training, the community in audit, risk, and privacy. CISM certification is ideal for those who are experienced information security managers. The CISM certification is also for individuals who have information security and related management responsibilities. The certification addresses the interdependencies between business objectives and IT security and focuses on managing information security within an organization. The purpose behind the development of this certification is to equip Information Security professionals with core Information Security knowledge and experience. The Certification holders are capable of aligning an enterprise's IT security program with its business goals.
Why CISM?
Once you clear the CISM exam, you can demonstrate
your understanding, knowledge, and skills to build an information security
program in your organization and align the organizations' goal and objective
with it. After CISM certification, you have information security expertise,
knowledge, and experience in developing an information security program. With
this certification, professionals can work anywhere across the globe as
multinational organizations recognize this certification.
CISM Domains:
Domain
1: Information Security Governance (24%):
Information security governance typically focuses on
several key processes. Those processes include personal management, sourcing,
risk management, configuration management, access management, vulnerability
management, incident management, and business continuity planning.
Domain 2: Information Risk Management (30%):
This domain covers information asset classification
to ensure that measures taken to protect assets are proportional to their
business value. Also, it focuses on risk assessments, vulnerability
assessments, and threat analyses are conducted consistently, at appropriate
times, and to identify and assess the risk to the organization's information.
Domain 3: Information Security Program Development and Management(27%):
This domain will explain how to develop and maintain
an information security program that identifies, manages, and protects the
organization's assets while aligning to information security strategy and
business goals, thereby supporting an effective security posture.
Domain 4: Information Security Incident Management(19%):
In this domain, you will learn about security
incidence response, develop a security incidence response plan and playbooks,
test business continuity plans, and test disaster recovery plans.
Exam information:
·
Duration:
4 Hours
·
Number
of questions: 150
·
Question
format: Multiple Choice
·
Passing
marks: 450 out of 800
CISM Certification Valid for?
The validity for CISM certification is three years.
If you want to maintain the credential, you need to pay $45 an annual
maintenance fee if you are an ISACA member, and for a non-ISACA Member, the
credential holder is $85.
Who should get CISM certification?
·
Security consultants and
managers
·
IT directors and managers
·
Security auditors and
architects
·
Security systems engineers
·
Chief Information Security
Officers (CISOs)
·
Information security managers
How you can get CISM certification:
Infosec Train is one of the leading IT security
training providers. We offer a comprehensive training program for Certified
Information security manager (CISM) certification. If you want to take the
expert's help in getting through the CISM certification exam, check this CISM
certification training course offered by Infosec
Train:
Comments
Post a Comment