The prerequisites include that participants must have a minimum of five years of information security work experience.
Students must have a minimum of three years of information security management work experience that includes three or more of the job practice analysis areas.
The work experience provided must be within 10 years preceding the CISM application date.