What Is ISACA Certified Information Security Manager (CISM)?

Overview

ISACA Certified Information Security Manager (CISM) (exam CISM) is a ISACA credential. Security governance, risk, program management and incident management, mapped to the CISM job practice. This PathKey™ guide summarizes the domains, format, cost signals, eligibility, and renewal pattern so you can decide before you book. Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISACA exam. ISACA sets exam content, fees, and policies.

Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISACA exam. ISACA sets exam content, fees, and policies.

Who it is for

• Information security managers and aspiring CISOs.
• Security architects and engineers moving into management.
• Risk and governance staff who oversee security programs.

Exam domains

Weights follow the official CISM outline.

1. 01

   Information Security Governance

   17%

   Enterprise Governance: Organizational Culture, Legal, Regulatory and Contractual Requirements, Organizational Structures, Roles and Responsibilities, and Information Security Strategy: Information Security Strategy Development, Information Governance Frameworks and Standards, Strategic Planning.
2. 02

   Information Security Risk Management

   20%

   Information Security Risk Assessment: Emerging Risk and Threat Landscape, Vulnerability and Control Deficiency Analysis, Risk Assessment and Analysis, and Information Security Risk Response: Risk Treatment and Risk Response Options, Risk and Control Ownership, Risk Monitoring and Reporting.
3. 03

   Information Security Program

   33%

   Information Security Program Development: Information Security Program Resources, Information Asset Identification and Classification, Industry Standards and Frameworks for Information Security, Information Security Policies, Procedures and Guidelines, and Information Security Program Management: Information Security Control Design and Selection, Information Security Control Implementation and Integrations, Information Security Control Testing and Evaluation, Information Security Awareness and Training.
4. 04

   Incident Management

   30%

   Incident Management Readiness: Incident Response Plan, Business Impact Analysis (BIA), Business Continuity Plan (BCP), Disaster Recovery Plan (DRP), and Incident Management Operations: Incident Management Tools and Techniques, Incident Investigation and Evaluation, Incident Containment Methods, Incident Response Communications.

Exam format and cost

Questions

Confirm on the vendor site

Duration

Confirm on the vendor site

Format

Multiple choice and related item types (confirm on the vendor outline)

Passing score

Confirm the passing score on the vendor site

Cost

575 USD (confirm on the vendor site)

Delivery

Vendor-approved test center or online proctoring (confirm on the vendor site)

Languages

Confirm available languages on the vendor site

Experience and eligibility

ISACA requires five years of information security management experience. ISACA allows waivers for up to two of those years. You can take the exam before you have the experience. ISACA gives you five years after passing to apply for certification. We don't add enrollment prerequisites of our own.

Renewal

Renewal rules for ISACA Certified Information Security Manager (CISM) are set by ISACA. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.

Roles this credential fits

• Information Security Governance, Information Security Risk Management, Information Security Program, Incident Management, mapped to the official ISACA CISM job practice.
• Security Management
• Teams standardizing on this credential for hiring or compliance

Official sources

• ISACA credentialing
• Official ISACA exam details

Always confirm fees, dates, and eligibility on the vendor site before you register. Vendors change outlines and prices without notice.