How to Get CISM ( Certified Information Security Manager) Certified!
This article will give you the groundwork to begin your journey into the elite ranks of Certified Information Security Managers. Whether you have an IT Security management background or you have a strong background in Auditing management the CISM certification is perfect for you.
- Difficulty:
- Moderate
Instructions
-
-
1
The best place for information is at the source. So check out ISACA at www.isaca.org/cism/. As the sponsors of this certification ISACA will provide you with some strong insights into the CISM certification.
-
2
Take a look at the requirements to become CISM certified.
1. Pass the CISM Exam, which is only offered twice a year.
2. Submit an application and prove you have five years of IS auditing, control or security work experience or have valid substitutes (explained later) with a minimum of 3 years security management experience.
3. Agree to Code of Professional Ethics.
4. Pay yearly fee and Minimum of 20 hours CPE (Continuing Education Program) and 120 CPE's every three years. -
3
Pass the CISM Exam. If you have IT certifications like higher level Microsoft, Cisco, or CISSP Certifications you will already have 50% of the knowledge needed. Conversely if you have security management experience you will have the other 50% of knowledge needed. However you will need some additional tools to pass. I recommend checking out Pass IT Exams questions and the CISM Prep Guide just check e-bay and Amazon for the best prices. I would also recommend if you don't have a lot of experience take a look at an instructor led class like cismtraining.com offers.
-
4
Register for the CISM Exam and pass the exam. Please note that the CISM exam is only offered twice a year and you must register almost 2.5 months ahead of the test date. Registration can be done through the ISACA.Org web site. The exam is 4 hours and has 200 multiple choice questions you must score at least a 450 out of a scale of 200-800. Also you will not know your score until 2 months later
-
5
Fill out an application that includes a detailed list of your experience to meet the 5 year requirement information security experience with 3 years of information security management experience. The experience must be in the preceding 10 years or the work experience must be gained within five years from the date of originally passing the exam.
However you can substitute years for the following areas:
1. CISA in good standing fill in for 2 years experience
2. CISSP in good standing fill in for 2 years experience
3. Post Graduate degree in an Information Security field fill in for 2 years experience.
4. 1 year of Information Security Management experience fill in for 1 year of experience.
5. Following certifications: MCSE, GIAC, Security+, CBCP, and ESL IT Security Manager fill in for 1 year of experience. -
6
However you can substitute years for the following areas:
1. CISA in good standing fill in for 2 years experience
2. CISSP in good standing fill in for 2 years experience
3. Post Graduate degree in an Information Security field fill in for 2 years experience.
4. 1 year of Information Security Management experince fill in for 1 year of experince.
5. Following certifications: MCSE, GIAC, Security+, CBCP, and ESL IT Security Manager fill in for 1 year of experince. -
7
You've applied and been accepted so now you just need to maintain your CPE courses and ask for the raise you were looking for. Good Luck and enjoy it.
-
1
Tips & Warnings
Make sure you create a favorites folder for your CISM information and bookmark each site you find useful.
Always try to use www.Google.com and search for "CISM" you'll find lot's of valuable information
Remember that ISACA can and has changed these requirements before so make sure you review them before signing up for the exam.
