CIIM study guide
CIIM · Work through your exam, one topic at a time.
The Certified Information and Identity Management (CIIM) credential is offered by Identity Management Institute® (IMI), an organization that describes itself as serving professionals in identity governance, access management, and data protection. IMI states that it has issued certifications since 2007 and that its certifications are intended to help members advance their careers and gain the trust of the business communities they serve with their identity and access management skills. The CIIM study guide has 5 sections and about 1,763 words.
01Identity Governance
Identity Governance is the domain that tests whether you can connect identity lifecycle events to policy, least privilege, segregation of duties (SoD), and auditable evidence. The exam focuses on governance decisions and controls, not merely account creation.
357 words, about 2 min02Access Management
Access Management tests how identities prove who they are and how systems decide what they may do. The exam distinguishes authentication, authorization, federation, session control, and privileged access, and expects controls that enforce least privilege across cloud and on-premises applications.
353 words, about 2 min03Data Protection
Data Protection tests how identity data is classified, minimized, encrypted, retained, and monitored. The exam treats identity data as sensitive personal data, so controls must cover the identity store, credentials, logs, backups, and data shared with applications or partners.
358 words, about 2 min04Identity Risk Management
Identity Risk Management tests whether you can identify, score, treat, and monitor identity risk in business terms. The exam expects a repeatable method: find the risk source, estimate likelihood and impact, choose a treatment, assign an owner, and track residual risk.
348 words, about 2 min05Identity Theft and Fraud Controls
Identity Theft and Fraud Controls tests how to prevent, detect, and respond to someone using another person's identity or a fabricated identity to obtain value. The exam covers account takeover, synthetic identity, new-account fraud, credential stuffing, phishing, social engineering, and insider misuse.
347 words, about 2 min