Certified Information Security Manager is also offered by ISACA. This is mainly focused toward IT Professionals who are responsible for managing and governing information security systems for their organizations. This certification will help you learn the skills needed to manage security risk, security program development and how to manage security governance, incident management, and response-related activities. Like CISA, CISM also requires a minimum of five years of security work experience; out of five years, three years must be in information-security management. You can also appear for the exam, and provide evidence in the five years after passing the exam. CISM focuses on the following five domains:
- Domain 1: Information Security Governance
- Domain 2: Information Risk Management
- Domain 3: Information Security Program Development...