The CISM is a well known certification issued by the leader in IT governance, control, security and assurance----
ISACA. It is for the candidates who manages designs and oversees an enterprise's information security. This certification tests a candidate's knowledge in security management. Individuals who get the CISM certification will become part of an elite peer network, attaining a one-of-a-kind credential.
The CISM Certification Committee administers the development of the exam and ensures the currency of its content. Questions for the CISM exam are developed through a comprehensive process designed to ensure the ultimate quality of the exam. The process includes a Test Enhancement Subcommittee (TES) that works with item writers to develop and review questions before they are submitted to the CISM Certification Committee for review. A job practice serves as the basis for the exam and the experience requirements to earn the CISM certification. This job practice is periodically updated and consists of five content areas (domains). The domains and the accompanying tasks and knowledge statements were the result of extensive research and feedback from subject matter experts around the world.
The tasks and knowledge statements are about the tasks performed by CISMs and the knowledge required handling these tasks. This exam will test candidates' practical knowledge associated with performing these tasks:
• Information Security Governance (23%)
• Information Risk Management (22%)
• Information Security Program Development (17%)
• Information Security Program Management (24%)
• Incident Management and Response (14%)
There are 200 multiple-choice questions in the CISM exam. A candidate must have a score of 450 or higher to pass the exam. A score of 450 represents a minimum consistent standard of knowledge as established by the CISM Certification Committee. If a candidate receives a passing score, he or she may then apply for certification if all other requirements are met.