CISM: Certified Information Security Manager

Knowledge of the business enables the information security manager to align security objectives, controls, priorities, and risk decisions with organizational needs and risk appetite. Risk assessments, audits, and trained staff are important, but their effectiveness depends on that business alignment.