The Certified Information Security Manager (CISM) is a professional certification designed for individuals who design and manage enterprise information security programs. Rather than focusing purely on technical skills, CISM places a strong emphasis on governance, risk, and alignment of security initiatives with organizational goals.