Earners of the Certified Information Systems Security Professional have learned leadership and business management, systems lifecycle management, risk management, understanding BCP and DRP, law, ethics, and incident management to enhance enterprise's security architecture.