CISM Certification validates advanced knowledge of information security governance, risk management, security program management, and incident management. CISM means Certified Information Security Manager and is designed primarily for professionals who manage or influence enterprise security programs.