CISM EXAM

Exam:

Certified Information Security Manager Exam

Industry:

Country:

Global

Website:

https://www.isaca.org/credentialing/cism

CISM Exam Overview

The Certified Information Security Manager (CISM) exam is a globally recognized certification offered by ISACA. It is designed for individuals who manage, design, oversee, and assess an enterprise’s information security.

Exam Details

Exam duration: 4 hours
Number of questions: 150
Question format: Multiple choice
Passing score: 450 out of 800
Exam language: English
Exam fees:
- ISACA member: $575 (online), $760 (in-person)
- Non-member: $760 (online), $965 (in-person)

Exam Content Outline

The CISM exam covers four domains:

Information Security Governance (24%)
Information Risk Management (30%)
Information Security Program Development and Management (27%)
Information Security Incident Management (19%)

Certification Requirements

To become CISM certified, candidates must:

Pass the CISM exam
Have a minimum of five years of information security work experience, with at least three years of information security management work experience in three or more of the CISM domains
Adhere to the ISACA Code of Professional Ethics
Agree to comply with the Continuing Professional Education Policy

Exam Preparation Resources

ISACA offers the following resources to help candidates prepare for the CISM exam:

CISM Review Manual
CISM Review Questions, Answers & Explanations Manual
CISM Online Review Course
CISM Exam Prep Community
Virtual Instructor-Led Training

Who Should Take the CISM Exam?

The CISM certification is suitable for professionals who have experience in managing, designing, overseeing, and assessing an enterprise's information security. This may include:

Information Security Managers
IT Consultants
Security Analysts
Risk Management Professionals
IT Directors

The CISM certification is ideal for those who want to demonstrate their expertise in information security management and advance their careers in this field.

Related Certifications

Other certifications related to information security management include:

Certified Information Systems Security Professional (CISSP) - Offered by (ISC)Â², this certification covers a broad range of information security topics.
Certified in Risk and Information Systems Control (CRISC) - Another ISACA certification focusing on risk management and information systems control.
Certified Information Systems Auditor (CISA) - Also offered by ISACA, this certification is geared towards information systems auditing, control, and security professionals.