Certified Information Security Manager, or CISM, is a certification for advanced IT professionals who want to develop and manage an infosec program at the enterprise level. It's offered by ISACA, a nonprofit professional association focused on IT governance, and focuses on four core areas:
Information security management Information risk management and compliance Information security program development and management Information security incident management
CISM is desirable for professionals interested in making business decisions about cybersecurity and working with — or maybe joining — your organization's leadership.
CISM vs. CISSP CISM and CISSP, are the most popular advanced cybersecurity certifications. Both CISM and CISSP require infosec technical savvy, but CISM specifically requires that you show that you understand the incentives around information security from a business point of view, rather than just a technical standpoint. It is strongly oriented towards managers and those who aspire to be promoted to management. A CISSP certification, on the other hand, demonstrates in-depth technical knowledge over a broad list of security domains, though it involves some managerial responsibilities as well.
The CISM certification covers four domains that focus on governance and management: Domain 1. Information Security Governance (24%) Domain 2. Information Risk Management and Compliance (33%) Domain 3. Information Security Program Development and Management (25%) Domain 4. Information Security Incident Management (18%)
The CISSP covers eight domains, which are technically oriented and address critical security topics in detail: Domain 1. Security and Risk Management (15%) Domain 2. Asset Security (10%) Domain 3. Security Architecture and Engineering (13%) Domain 4. Communication and Network Security (13%) Domain 5. Identity and Access Management (13%) Domain 6. Security Assessment and Testing (12%) Domain 7. Security Operations (13%) Domain 8. Software Development Security (11%)
CISSP - CISM
Length of Exam - 3 hours/100-150 items - 4 hours/150 questions Passing Score - 700 out of 1,000 - 450 or higher Exam Fee - USD 749 EUR 665 GBP 585 - Members: U.S. $575; Nonmembers: U.S. $760
Join 4M+ learners. Unlock unlimited quizzes, wrong-answer tracking, flashcards + reminders, study guides, and 1-on-1 challenges.