<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cism on Samarthya</title><link>https://samarthya.me/tags/cism/</link><description>Recent content in Cism on Samarthya</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© Samarthya 2018-2026. All rights reserved.</copyright><lastBuildDate>Sat, 30 Aug 2025 00:00:00 +0000</lastBuildDate><atom:link href="https://samarthya.me/tags/cism/index.xml" rel="self" type="application/rss+xml"/><item><title>CISM Notes: Connecting Technical Controls to Security Governance</title><link>https://samarthya.me/posts/cism-security-governance-notes/</link><pubDate>Sat, 30 Aug 2025 00:00:00 +0000</pubDate><guid>https://samarthya.me/posts/cism-security-governance-notes/</guid><description>&lt;p&gt;While working with infrastructure, security controls feel very concrete: a certificate expires, a broker needs authorization, or an account has too much access. Studying CISM helped me connect those individual tasks to the larger management context.&lt;/p&gt;</description></item><item><title>Cracking CISM</title><link>https://samarthya.me/posts/cracking-cism/</link><pubDate>Tue, 25 May 2021 09:26:50 +0000</pubDate><guid>https://samarthya.me/posts/cracking-cism/</guid><description>&lt;p&gt;I recently gave &lt;code&gt;CISM&lt;/code&gt; and I believe it is easily &lt;code&gt;crackable&lt;/code&gt;. For those who are pursuing this certification the mantra is similar (or at least the one that I followed)&lt;/p&gt;</description></item><item><title>ISG: Information security governance</title><link>https://samarthya.me/posts/isg-information-security-governance/</link><pubDate>Thu, 20 May 2021 12:00:00 +0000</pubDate><guid>https://samarthya.me/posts/isg-information-security-governance/</guid><description>&lt;p&gt;Rules that run the organisation = Governance. ISG includes the element required to provide the Senior Management assurance that its direction and intent are reflected in the security posture of the organisation.&lt;/p&gt;</description></item></channel></rss>