What’s New in CISM in 2022?
Table of Contents
Introduction to CISM
Why CISM Certification?
Old vs. New CISM Domains
Overview of New CISM Domains
Domain 1: Information Security Governance (17%)
Domain 2: Information Security Risk Management (20%)
Domain 3: Information Security Program (33%)
Domain 4: Incident Management (30%)
CISM Exam Details
Introduction to CISM
CISM is an acronym for Certified Information Security Manager. ISACA awards the Certified Information Security Manager (CISM) certification to IT professionals who indicate expertise in information security governance, program development & management, incident management, and risk management.
The CISM is a management-focused certification that encourages global information security procedures and recognizes professionals’ abilities to manage, supervise, and assess an organization’s information security. The CISM certification is designed for those who manage teams of cyber security specialists and others who want to lead security teams.
Why CISM Certification?
Information security contributes significantly to business growth by enabling dependable operations and new potential for qualitative uniqueness. Organizations all over the world recognize the accomplishment and expertise that CISM certification shows, so you’ll be in high demand. The CISM certification indicates that you have a broad understanding of technical skills and a grasp of business objectives related to data security. CISM is regarded as one of many professionals’ most significant and well-paid certifications. If you seek a career as an Information Security Manager, CISM is the best choice.
The CISM is a desirable certification to obtain if you have at least five years of work experience in information security and at least three years of work experience in areas of information security management. Work experience must be achieved within 10 years of applying for certification or within 5 years of passing the exam.
The CISM exam content will be updated on June 1, 2022. Until the switch, you can still take the current CISM exam based on the current topic outline till 31st May 2022.
Old vs. New CISM Domains
Overview of New CISM Domains
CISM verifies your knowledge in these four domains indicated below, which is applicable across all organizations.
Domain 1: Information Security Governance (17%)
The information security governance domain accounts for 17% of the total weightage of the CISM exam. This domain examines the body of knowledge and associated functions required to build an information security governance structure aligned with organizational goals. It outlines what an Information Security Manager must do to develop and maintain an information security governance framework and supporting processes that ensure that the information security strategy is aligned with the corporate objectives and goals.
Domain 2: Information Security Risk Management (20%)
The information risk management domain accounts for 20% of the total weightage of the CISM exam. In this domain, you will understand the organization’s risk management strategy and know how it relates to information technology. To fulfill organizational goals and objectives, you will understand how to manage information risk appropriately based on risk appetite. This domain focuses on risk identification, threats, Advanced Persistent Threats (APT), risk assessment, and evaluation.
Domain 3: Information Security Program (33%)
This domain of CISM contains 33% exam weightage. The information security program domain maintains an information security program aligned with the information security strategy. This domain gives you an overview of information security trends, program resources, management, and process concepts of technology resources. You will understand the industry standards frameworks of information security.
Domain 4: Incident Management (30%)
The incident management domain considers being most essential since recovery from an incident provides business continuity. The significance of incident management derives from the fact that its purpose is to monitor and react to unanticipated interruptions to keep consequences within reasonable standards. This domain covers the importance of incident management and incident response plans. To ensure an efficient and timely response to information security issues, create and maintain an incident response strategy.
CISM Exam Details
| Certification | Certified Information Security Manager (CISM) |
| Exam Duration | 4 Hours |
| Number of Questions | 150 |
| Exam Pattern | Multiple Choice |
| Passing Marks | 450 out of 800 |
| Language | English, Japanese, Korean, Spanish |
CISM with InfosecTrain
The CISM certification, which is focused on management, promotes worldwide security practices and acknowledges the professional who manages, designs, oversees, and assesses an organization’s information security. The CISM certification is the worldwide recognized benchmark of excellence in this field, and the demand for skilled information security management experts is on the rise. The CISM training course at InfosecTrain assists applicants in developing an understanding of risk management, information security governance, the development of security policies, and the ability to fulfill organizational objectives. So check out InfosecTrain’s CISM certification training program right here.
Contact Us
1800-843-7890 (India) 
