Certified Information Systems Auditor (CISA) is a professional certification for Information Technology Audit professionals sponsored by ISACA, formerly the Information Systems Audit and Control Association.
The CISA certification covers subject matter in a variety of Information Security topics such as:
1. The Process of Auditing Information Systems
2. Governance and Management of IT
3. Information Systems Acquisition, Development and Implementation
4. Information Systems Operations, Maintenance and Support
5. Protection of Information Assets
Certified Information Security Manager (CISM) is a certification for information security managers awarded by ISACA (formerly the Information Systems Audit and Control Association). To gain the certifications, individuals must pass a written examination and have at least five years of information security experience with a minimum three years of information security management work experience in particular fields.
The CISM requires demonstrated knowledge in four functional areas of Information Security including:
1. Information Security Governance
2. Information Risk Management and Compliance
3. Information Security Program Development and Management
4. Information Security Incident Management