Information Systems Audit and Control Association® Certified Information Security Manager (CISM) and Certified Information System Auditor (CISA)

Overview

Certified Information Security Manager

The ISACA Certified Information Security Manager certification, also known as CISM, is a globally-recognized, expert-level credential designed for IS and IT professionals to develop and manage an information security program. ISACA CISM certification demonstrates a deep understanding of the relationship between information security programs and broader business goals and objectives. Having a CISM certification adds directly to the value you offer the enterprise you serve. A CISM certification enables you to get recognized for your technical competence, experience, and appreciation of business objectives.

ISACA CISM exam objectives are:

• Information Risk Management
• Information Security Governance
• Information Security Incident Management
• Information Security Program Development and Management

The ISACA CISM training program validates a candidate's proficiency and knowledge to ensure improved alignment between the organization's information security program, identify critical issues and customize company-specific practices to support the governance of information and related technologies.

Certified Information System Auditor

The ISACA CISA Certified Information Systems Auditor certification is an expert-level, globally recognized credential designed for IS audit control, and for assurance and security professionals to audit, control, monitor, and assess information technology and business systems. The CISA (Certified Information Systems Auditor) certification is renowned across the globe as a standard for Business Systems and Information technology professionals who audit, monitor, access, and control data. Being CISA certified showcases audit experience that demonstrates a candidate's knowledge and skills, and reports on compliance and institute controls within the enterprise.

ISACA CISA exam objectives are as follows:

• Protection of Information Assets
• Governance and Management of IT
• Information System Auditing Process
• Information Systems Operation and Business Resilience
• Information Systems Acquisition, Development, and implementation

The ISACA CISA training program validates a candidate's proficiency and knowledge to meet the dynamic challenges of a modern enterprise, identify critical issues, and customize practices to support information systems.

Prerequisites:

ISACA has the following pre-requisites for CISM certification exam:

• Attain and report an annual minimum of twenty (20) CPE hours. These hours must be appropriate to the currency or advancement of the CISM s knowledge or ability to perform CISM-related tasks. The use of these hours towards meeting the CPE requirements for multiple ISACA certifications is permissible when the professional activity is applicable to satisfying the job-related knowledge of each certification.
• Submit annual CPE maintenance fees to ISACA International Headquarters in full.
• Attain and report a minimum of one hundred and twenty (120) CPE hours for a three-year reporting period.
• Submit required documentation of CPE activities if selected for the annual audit.
• Comply with ISACA's Code of Professional Ethic

ISACA has the following pre-requisites for CISM certification exam:

To apply for the CISA exam, you’ll need at least five years of professional information systems auditing, control or security work experience within the past 10 years. You can receive a waiver for up to three years of experience if you have the following:

• Maximum of one year of IS experience or one year of non-IS auditing experience
• The equivalent of a two- or four-year degree, which can be substituted for one to two years of experience
• A bachelor’s degree or master’s degree from a university that teaches the ISACA-sponsored curriculum, which can be substituted for one year of experience
• A master’s degree in IS or IT from any accredited university, which is equivalent to one year of experience