This book is a practical guide on the topic of information security management and also serves as a companion book for exam preparation for the "Certified Information Security Manager (CISM)" certification by ISACA. After an introduction, the first part of the book prepares readers for the CISM exam in four chapters. These are structured according to ISACA's framework into "Security Governance," "Risk Management," "Security Program Development and Management," and "Incident Response." The second part addresses the IT baseline protection standard of the BSI and the implementation of security based on a baseline approach. The third and final part revisits the previously discussed aspects through practical examples and supplements them with current topics, including the IT Security Act. A detailed index and a comprehensive glossary complete the book.