Certified Information Security Manager News

Terrific Benefit to All Non-Members All nonmember exam passers (i.e., passed the CISA or CISM exam in December 2006 or June 2007) will receive notification in August that they have been granted a free trial membership for August through December 2007.    ISACA is extremely proud to advise you that the American National Standards Institute (ANSI) has awarded accreditation under ISO/IEC 17024 to ISACA's Certified Information Systems Auditor (CISA) and Certified Information Security Manager (CISM) certification programs. ANSI's accreditation: Promotes the unique qualifications and expertise our certifications provide Protects the integrity of our certifications and provides legal defensibility Enhances consumer and public confidence in the certifications and the people who hold them Facilitates the mobility of certified individuals across borders or industries Accreditation by ANSI signifies that ISACA's procedures meet ANSI's essential requirements for openness, balance, consensus and due process. To maintain ANSI accreditation, certification bodies such as ISACA are required to consistently adhere to a set of requirements or procedures related to quality, openness and due process. The American National Standards Institute (ANSI) is a private, nonprofit organization that administers and coordinates the US voluntary standardization and conformity assessment system. Its mission is to enhance both the global competitiveness of US business and the US quality of life by promoting and facilitating voluntary consensus standards and conformity assessment systems, and safeguarding their integrity. This accreditation and adherence to ISO/IEC 17024 are used as an industry benchmark. For example, the U.S Department of Defense (DoD), to ensure a knowledgeable and skilled workforce, has developed a directive that requires every full- and part-time military service member, defense contractor, civilian and foreign employee with privileged access to a DoD system, regardless of job series or occupational specialty, to obtain a certification credential that has been accredited to the ISO 17024 standard. Congratulations to our members who became CISMs in March 2006: Robert Bamber Marshall, Jr., CISM, CISSP CISM—Valuable Designation Available for IT Security Managers For information about our Chapter's Review CISM courses, please visit Education CISM Review only As information technology continues to grow in importance to all areas of an enterprise, IT security professionals are assuming greater responsibility and ascending to higher levels of management. While IT security managers and directors must be technically proficient, they must also possess strong business management skills to lead effective departments across entire organizations. Until now, it has been difficult for senior business executives to ensure their IT security managers and directors have the expertise to mitigate IT-related risk and protect their enterprises. To fill this gap, the ISACA offers the Certified Information Security Manager™ (CISM™) designation. “Organizations need to protect themselves from increasingly complex IT security threats, and executives must ensure that their IT security managers have the expertise to reduce risk and protect the organization,” said Leslie Macartney, CISM, CISA, chair of the ISACA CISM Certification Board. “Security credentials are playing a growing role in the recruitment and development of competent and reliable staff,” added Macartney, who is also the chief information security officer at Reuters, UK. “Many companies, such as Reuters, consider the attainment of credentials to be an integral part of the security skills development process.” CISM helps provide senior executives with the assurance that those certified have the expertise to offer effective security management and consulting. It is a management- level business designation for professionals who manage an organization’s information security and possess the knowledge and experience to set up, implement and direct a security structure to manage risk effectively. “The CISM certification addresses a lot of what employers are telling us they are looking for in senior security managers,” said David Foote, president and chief research officer, Foote Partners, an IT workforce research firm and management consultancy. “Sarbanes-Oxley in the US and similar regulation around the world will continue to focus more attention on infosecurity governance, enterprise program management and global security strategies. Enterprises need more individuals who have the expertise contained in the CISM job domains. Certification Update December 2006 Exam:  ISACA has again enjoyed an overwhelming response for the December CISA and CISM exams. Changes to registration information, such as exam site or language, are no longer being accepted. However, candidates unable to take the exam can request a deferral of their registration fees to the next exam.  Deferral requests received from 2 November 2006 through 1 December 2006 will be charged a processing fee of US $100. Requests will not be accepted after 1 December 2006. If you have registered for December’s exam, please report any changes in registration information to the certification department immediately to ensure the timely receipt of your admission tickets and exam results. Additionally, please remember that the CISM exam in December 2006 will be the last one using the current CISM job practice areas and that you should be using the 2006 CISM study materials. CISM Reference Material for 2007 Exams CISM Review Manual 2007, available in English, Japanese and Spanish. CISM Review Questions, Answers & Explanations Manual 2007 (300 questions), available in English, Japanese and Spanish. CISM Review Questions, Answers & Explanations Manual 2007 Supplement (100 questions), available in English, Japanese and Spanish. CISM Practice Question Database v7 (400 questions), available in English. Descriptions, availability dates and ordering details are also available at www.isaca.org/bookstore and in the Information Systems Control Journal. Please contact the ISACA Bookstore at +1.847.253.1545, ext. 478 or 401, or e-mail bookstore@isaca.org. Applications for Certification:  Please remember that CISA and CISM application processing can take eight weeks from receipt of complete application. Additionally, there are hundreds of exam passers from the 2001-2005 exams who have not submitted their applications. If you are one of those persons, please submit your applications if you meet all of the requirements. Those who passed the exam in 2001 must submit their application no later than 31 December 2006 or their score will be invalidated. Further application details are available at www.isaca.org/cisaapp or www.isaca.org/cismapp .      at Our Library of Supporting Resources -