CISM: Certified Information Security Manager

Information security controls are most effective when business stakeholders and IT functions jointly determine them, ensuring that controls address business risk, fit operational processes, are technically feasible, and receive stakeholder support.