Search...
Everything needed to plan for the CISM (CISM) exam: number of questions, time limit, passing score, and the official domain weightings. For the domain checklist, see the CISM study guide. For a week-by-week plan, see the CISM study plan.
Facts last checked . Vendor links for this exam are on the materials page. To correct a figure, use the corrections policy.
CISM (CISM) is a Professional level ISACA certification exam with 150 questions in 240 minutes (last checked 2026-10-19), requiring a scaled score of 450 to pass. It covers 4 domains: Information Security Program (33%); Incident Management (30%); Information Risk Management (20%); Information Security Governance (17%).
Exam code
CISM
Questions
150
Time limit
240 min
Passing score
450 scaled
Official domains
4
Level
Professional
Provider
ISACA
Practice questions
300+ on CertStud
| Domain | Weight | What it covers |
|---|---|---|
| Information Security Program | 33% | Develop and manage the information security program |
| Incident Management | 30% | Plan, establish, and manage incident response capability |
| Information Risk Management | 20% | Manage information risk to an acceptable level |
| Information Security Governance | 17% | Establish and maintain an information security governance framework |
Percentages reflect published official domain weightings. Prerequisite knowledge and current scoring rules are confirmed on the ISACA exam page before booking.
The CISM figure on file is 150 questions. Last checked 2026-10-19. Confirm the current figure with ISACA before you book.
The CISM time limit on file is 240 minutes. Last checked 2026-10-19. Confirm the current figure with ISACA before you book.
The CISM exam requires a scaled score of 450 to pass. A scaled score is not a raw percentage of correct answers. Last checked 2026-10-19. Confirm the current figure with ISACA before you book.
The CISM exam covers 4 official domains: Information Security Governance (17%), Information Risk Management (20%), Information Security Program (33%), Incident Management (30%).
Information Security Program carries the heaviest weighting on the CISM exam at 33% of the exam. Develop and manage the information security program
CISM is the exam code for CISM (CISM - Certified Information Security Manager), a Professional level ISACA certification exam covering 4 domains.
The CISM exam reports a scaled score. The passing score on file is 450. Plan for 150 questions across 240 minutes, weighted by domain: 33% Information Security Program, 30% Incident Management, 20% Information Risk Management, 17% Information Security Governance. Last checked 2026-10-19. Confirm the current figure with ISACA before you book.
CertStud offers free CISM practice questions with detailed explanations, plus full-length practice exams and flashcards at https://certstud.com/certifications/isaca/cism. Start with 10 free questions at https://certstud.com/try-free.