CERTIFIED INFORMATION SECURITY MANAGER

(CISM)
Kelly Handerhan, Instructor,
CISM, CISSP, PMP

Course Outline
What is CISM and what to expect from the exam?

The Five Domains

1.Information Security Governance

2.Risk Management
3.Information Security Program Management
4.Information Security Management
5.Response Management

What is CISM?

The management-focused CISM certification promotes

international security practices and recognizes the
individual who manages, designs, and oversees and
assesses an enterprises information security.
Geared towards professionals who have Five (5) or
more years of experience in information security
management. Waivers are available for a maximum of
two (2) years

The Breakdown:

Domain 1: Information Security Governance (23% of the exam or 46 questions)

Domain 2: Information Risk Management (22% of the exam or 44 questions)

Domain 3: Information Security Program Development (17% of the exam or 34 questions)

Domain 4: Information Security Program Management (24% of the exam or 48 questions)

Domain 5: Incident Management and Response (14% of the exam or 28 questions)

Exam Specifics

ISACA (Information Security Audit and Control Association)

www.isaca.org
Offered Only Three Times Per Year
200 Questions
Four Hour Time Limit
Multiple Choice
Choose the Credited Response
Passing score is 450 on a scale of 200-800
What is next?

How Do I Pass the First Time?

Review Cybrary Slides

Study the Material

Think Like a Manager

Find the Credited Response

Think: Cost/Benefit Analysis