Share with us:

CIma (U.K)

certified information systems manager

The CISM designation assures employers that their staff is able to apply state-of-the-art information security management practices and techniques and that these skills are maintained. For these reasons, many employers require the achievement of the CISM designation as a strong factor for employment and/or advanced promotion. To help ensure success in the global marketplace, it is vital to select a certification program based on universally accepted information security management practices. CISM delivers such a program.

Eligibility

- Individuals who manage, design, oversee and/or assess an enterprise's

information security (IS)
- Individual considering a career in IT Governance, IT Audit and Service

Management
- Individuals willing to enhance their professional image, technical knowledge and

skills
- Individuals who are already employed but are willing to obtain credentials that

potential employers seek

duration & course content

DURATION

Duration of the course is 6 months.

COURSE CONTENTS
The CISM exam covers five information security management areas, representing a job practice analysis of the work performed by information security managers as validated by prominent industry leaders, subject matter experts and industry practitioners. Each area represents a current market perspective of what is performed and what should be known by information security managers.

Information provides the basis for the CISM exam, and the percentages listed represent approximate percentage of test questions allocated to each area.

Information Security Governance	23%
Information Risk Management	22%
Information Security Program Development	17%
Information Security Program Management	24%
Incident Management and Response	14%

Examination Rules

- Exams are held twice in a year in the month of June and December.

- Each exam consists of 200 multiple choice questions given over a four-hour

period.
- Passing mark of 450 on a common scale of 200 to 800.
- A passing score on the CISM examination, without completing the required work

experience as outlined below, will only be valid for five years. If the applicant does

not meet the CISM certification requirements within the five year period, the

passing score will be voided.
- Submit an Application for CISM Certification.
- Once a CISM candidate has passed the CISM certification exam and has met the

work experience requirements, the final step is to complete the CISM Application

for Certification.

PRACTICAL EXPERIENCE

A minimum of five (5) years of professional information security managing work experience is required. Substitution and waivers of such experience may be obtained as follows:

- A maximum of one year of information systems, operating or programming

experience or one year of information security experience can be substituted for

one year of information systems security management experience.
- Every two years of experience as a full-time university instructor in a related field

(e.g. computer science, accounting, information systems security) may be

substituted for one year of information systems auditing, control or security

experience.
- 60 to 120 completed university semester credit hours (the equivalent of a two-

year or four-year degree), can be substituted for one or two years, respectively,

of experience. Even if multiple degrees have been eared, a maximum of 2 years

can be claimed.
- A bachelor’s or master’s degree from a university that enforces the ISACA

sponsored Model Curricul can be substituted for one year of information

systems auditing, control or security experience. This option cannot be used if

three years of experience substitution and educational waiver have already been

claimed.
- A master’s degree in information security or information technology from an

accredited university can be substituted for one year of experience.

Experience must have been gained within the ten-year period preceding the date of the application for certification. Candidates have five years from the date of their exam in which to apply. After five years, their exam score is void. It is important to note that many individuals choose to take the CISM exam prior to meeting the experience requirements.