If you’re exploring career growth in information security leadership, one question comes up often: Is CISM a technical or a managerial certification? The short answer is that CISM is primarily a managerial certification, but with a strong understanding of technical concepts. Let’s break this down clearly.