Certification Overview
Access management is the process of controlling and monitoring access to an organization’s systems, data, and resources. It ensures that only authorized users can access specific applications, information, or services.
Access management is one of the information security disciplines that interacts with users and is critical to the implementation of policies and procedures to support the security goals of the organization, mitigate access risks, maintain access controls, and comply with contractual and legal requirements.
Identity Management Institute (IMI)® developed the Certified Access Management Specialist (CAMS)® training program to teach access management concepts and test the knowledge of candidates for certification in the field of access management. CAMS® is a registered trademark of IMI.
Certification Process
Interested candidates must be members of the Identity Management Institute, apply to receive the CAMS study guide, and pass the online examination to become CAMS certified.
Please submit the membership application and the CAMS application to get started and receive the payment link to pay online.
CAMS Exam
The CAMS examination consists of 100 multiple-choice questions. Candidates must answer at least 70 questions correctly within 90 minutes to pass the exam and become certified. Registered candidates can schedule the exam up to 3 times at no additional cost which can be taken on any day except on the blackout dates listed in the exam registration form anywhere on desktop computers or mobile devices with Internet access. Click below to take the CAMS practice test and become familiar with the final exam format and content.
Access Management Role
In the fulfillment of their duties, CAMS professionals must in general ensure that:
- Users and their approvers are properly identified,
- Access is approved and granted on a timely basis,
- Access is removed timely and completely when users change jobs or roles,
- Access Control Matrix is maintained and periodically audited to ensure access permissions are valid and accurate,
- User activities are recorded and monitored, and
- Incidents or events are properly managed.
Critical Risk Domains™
The 10 Critical Risk Domains that professionals must understand and master to earn the CAMS designation include the following:
- Security Objectives
- Threats
- Access Controls
- Rights Management
- Identification
- Authorization
- Authentication
- Access Control Matrix
- Logging and Monitoring
- Event Management
Download the CAMS overview document for a summary of the Critical Risk Domains, and, download the study guide Table of Contents for a breakdown of the chapters.
Video Course
A short video course is available to teach CAMS candidates about the core topics of the CAMS certification program and supplement the study guide.
Who Should Become a CAMS?
Professionals who are engaged in any of the following activities either directly or in a support role will greatly benefit by becoming a Certified Access Management Specialist as they will improve their skills and increase their credibility:
- Receiving and verifying access requests,
- Reviewing access right approvals,
- Granting, correcting and removing access rights,
- Monitoring access activities,
- Auditing access control matrix and related system reports,
- Following up on suspicious activities, and
- Investigating and resolving access incidents.
Application Cost
The CAMS application fee is $195 for current IMI members and $290 for new members which includes 1 year membership, the CAMS study guide, up to 3 exam attempts, and the certificate upon passing the exam. Please submit the applications to get started.
Payment Processing
IMI uses PayPal and other third party credit card processors to request and receive international credit card payments after applications are received. Alternatively, candidates may mail a check or request for bank wire transfer information.
Certificate Maintenance
Certified professionals must earn continuing education, adhere to the IMI code of ethics, and be active members.








