What is CISM?

CISM stands for Certified Information Security Manager. It is a certification offered by ISACA (Information Systems Audit and Control Association) that validates expertise in information security governance, program development and management, risk management, and incident management. CISM is commonly used by information security managers, consultants, and those with information security management responsibilities to demonstrate their knowledge and skills in managing and overseeing information security programs within an organization. It focuses on the 'how' and 'why' of information security, rather than the technical 'what'.