Jobs Categories:

Job opportunities

IT jobs

Arts & Entertainment

Shopping 
Sports & Recreation

Business

Manager job

Information Security Manager
Information System Manager

IT Manager

Engineering Project Manager

Education and Certification

Career jobs:

Information Security Manager job description»

Certified (CISM) is a certification for information security managers awarded by the Information Systems Audit and Control Association (ISACA).

To gain the certifications, individuals must pass a written examination and have at least five years of information security experience with a minimum three years of information security management work experience in particular fields.

The intent of the certification is to provide a common body of knowledge for information security management. The CISM focuses on information risk management as the basis of information security.

It also includes material on broader issues such as how to govern information security as well as on practical issues such as developing and managing an information security program and managing incidents.

The point of view in the certification is that of widely accepted cross-industry best practices, where information security gets its justification from business needs. The implementation includes information security as an autonomous function inside wider corporate governance.

Sponsored ads:

Information security Standards:

The standard "established guidelines and general principles for initiating, implementing, maintaining, and improving information security management within an organization".

The actual controls listed in the standard are intended to address the specific requirements identified via a formal risk assessment.

The standard is also intended to provide a guide for the development of "organizational security standards and effective security management practices and to help build confidence in inter-organizational activities.

ISO/IEC 17799:2005 establishes guidelines and general principles for initiating, implementing, maintaining, and improving information security management

ISO/IEC 27001:2005 is designed to ensure the selection of adequate and proportionate security controls that protect information assets and give confidence

ISO/IEC 27001 is the only auditable international standard which defines the requirements for an Information Security Management System (ISMS)