glossary
What is CISM?
CISM (Certified Information Security Manager) is an ISACA certification focused on information-security management and governance.
Use the 3-question Fit CheckCertification details change. Always confirm final pricing, availability, and credential terms on the official provider page linked in the sources below before you pay for anything.
CISM (Certified Information Security Manager) is an ISACA certification focused on information-security management and governance. It validates the ability to design and manage an enterprise information-security program, distinct from hands-on technical security work.
What it means
ISACA's dedicated CISM page covers governance, risk management, the information-security program, and incident management. Passing the exam is only the first step: certification also requires an application demonstrating the required experience, the application fee, and adherence to ISACA's ethics and continuing-education policies. ISACA has announced that a new exam content outline takes effect November 3, 2026, so candidates studying across that date should confirm which outline applies.
Core source records
This table lists the page’s core content records and when they were checked. Claim-specific citations appear beside the relevant text and may not be repeated here.
| ID | Supports | Source | Checked |
|---|---|---|---|
| CIT-01 | Definition source for What is CISM? | ISACA — CISM Certification | 2026-08-23 |
Ready to turn this decision into a plan?
Learnerside planner