Certified Information Security Manager

The Certified Information Security Manager certification is for experienced information security managers and those individuals with responsibilities in information security management. The certification covers the management, design, oversight, and assessment of an enterprise’s information security program using internationally accepted practices.

The CISM is accredited by the American National Standards Institute (ANSI) under ISO/IEC 17024:2003.

The exam covers the following disciplines and percentage scope:

• Information Security Governance 23%
• Information Risk Management 22%
• Information Security Program Development 17%
• Information Security Program Management 24%
• Incident Management and Response 14%

How do you delay the advance of an attacker?

Threats to physical security

How Security management and Configuration Management work together

Should security be part of your SLA?

What are the differences between security policies and procedures?

Best practices for creating good security policies

How many phases are part of the IKE Process?

What are the two specific security controls added to the IPSec Protocol ?

What are the most common symmetric algorithms for cryptography?

What are the two primary methods for cryptography?