Certified Identity Risk Manager

Identity Management Institute (IMI) administers the Certified Identity Risk Manager™ (CIRM) professional designation. CIRM is administered based on the IMI certification standards and is designed for experienced professionals with certain identity risk management responsibilities. Such professionals are leaders who contribute to the identity risks management efforts of an enterprise within fields such as information security, access administration, audit, physical security, privacy, compliance, fraud, project management, information systems, risk management or identity management technology and consulting. The collective identity management practices of various groups and professionals throughout an organization strive to ensure an identity is complete, accurate, valid, approved, readily identified, secured, granted proper logical and physical access, monitored through its lifecycle, and deactivated upon its useful life.

Identity Management Institute has published a program overview and curriculum for the Certified Identity Risk Manager™ (CIRM) designation. The CIRM overview document defines identity management objectives, points out various business functions with identity management responsibilities and practices, and provides details regarding the CIRM training program and certification process including the Critical Risk Domains (CRD) which highlight the areas of responsibilities.

Critical Risk Domains

The following domains have been identified by IMI as the Critical Risk Domains (CRD) for the CIRM designation:

1. GOVERNANCE & MANAGEMENT
2. INTERNAL CONTROLS
3. TECHNOLOGY MANAGEMENT
4. AWARENESS & TRAINING
5. ACCESS MANAGEMENT
6. RISK ASSESSMENT
7. COMPLIANCE
8. AUDITING & MONITORING
9. COMMUNICATION
10. INCIDENT MANAGEMENT

Application Process

Interested candidates may submit an application which includes a qualifying point system to ensure candidates have the required experience and knowledge level and a written statement to assess a candidate’s risk management and communication skills.

To be certified, an applicant must be 1) an IMI member, 2) an experienced identity risk management professional with 100 qualifying points and a minimum of 4 years professional experience in one or more Critical Risk Domains, and 3) submit a written application for assessment.

You may download the Certified Identity Risk Manager application from the CIRM page at Identity Management Institute.