CtrlK

Search...

Trending this month -AWS CCP•CISSP•AZ-900•A+•TOGAF•AI-102•Sec+•AZ-104•CSA•ITIL 4

Quick Feedback

Back to CISM

Certified Information Security Manager Exam Guide

A comprehensive 8-week study plan to help you prepare for the ISACA Certified Information Security Manager certification exam.

Exam Information

240 minutes

Duration

150 questions

Questions

450/800

Passing Score

$575 USD (members) / $760 USD (non-members)

Exam Cost

Recommended Study Plan

Week 1

Information Security Governance Part 1

Domain 1: Information Security Governance (17%)

12-15 hours

Information security strategy aligned with organizational goals
Enterprise governance frameworks (COBIT, ISO 27001)
Information security governance structure
Security policies, standards, and procedures

Recommended Resources:

CISM Review Manual

COBIT Framework

Week 2

Information Security Governance Part 2

Domain 1: Information Security Governance (17%)

10-12 hours

Organizational culture and security awareness
Security metrics and monitoring
Resources and budget management
Ethics and professional standards

Recommended Resources:

ISACA Materials

Case Studies

Week 3

Information Security Risk Management Part 1

Domain 2: Information Security Risk Management (20%)

14-16 hours

Risk identification methodologies
Threat and vulnerability assessment
Asset valuation and classification
Risk analysis techniques (qualitative/quantitative)

Recommended Resources:

Risk Management Guides

NIST RMF

Week 4

Information Security Risk Management Part 2

Domain 2: Information Security Risk Management (20%)

12-14 hours

Risk treatment options
Risk monitoring and reporting
Third-party risk management
Business impact analysis

Recommended Resources:

BIA Templates

Vendor Management

Week 5

Information Security Program Part 1

Domain 3: Information Security Program (33%)

15-18 hours

Program development and management
Security architecture concepts
Security technologies and controls
Security awareness and training programs

Recommended Resources:

Program Management Materials

Security Architecture

Week 6

Information Security Program Part 2

Domain 3: Information Security Program (33%)

15-18 hours

Data protection and privacy
Identity and access management
Network and infrastructure security
Application security

Recommended Resources:

Security Controls Reference

IAM Best Practices

Week 7

Incident Management

Domain 4: Incident Management (30%)

14-16 hours

Incident response planning
Detection and classification
Response and recovery procedures
Post-incident review and lessons learned

Recommended Resources:

Incident Response Playbooks

NIST IR Guide

Week 8

Review and Practice Exams

All Domains - Final Review

20-25 hours

Full-length practice exams
Review weak areas identified
Scenario-based question practice
Exam day preparation and strategies

Recommended Resources:

Practice Exams

Quick Reference Guides

Exam Tips & Strategies

Think Like a Manager

CISM tests your ability to make decisions from a management perspective. Focus on governance, policy, and business impact rather than technical implementation details.

Manage Your Time

With 150 questions in 240 minutes, you have about 1.6 minutes per question. Flag difficult questions and return to them after completing easier ones.

Understand Domain Weights

Domain 3 (Program) and Domain 4 (Incident Management) together account for 63% of the exam. Prioritize these areas while ensuring coverage of all domains.

Master Scenario Questions

Many questions present real-world scenarios requiring you to choose the BEST answer. Focus on what should be done first, what's most important, or what's the primary consideration.

Key Topics to Master

Information Security Governance

Security Policy Development

Risk Assessment Methodologies

Business Impact Analysis

Security Program Management

Security Architecture

Incident Response Planning

Disaster Recovery

Business Continuity

Compliance & Regulations

COBIT Framework

ISO 27001/27002

NIST Frameworks

Security Awareness Training

For the most up-to-date exam information, visit the official exam guide.

View Official Exam Guide

Back to CISM

Certified Information Security Manager Exam Guide

A comprehensive 8-week study plan to help you prepare for the ISACA Certified Information Security Manager certification exam.

Exam Information

240 minutes

Duration

150 questions

Questions

450/800

Passing Score

$575 USD (members) / $760 USD (non-members)

Exam Cost

Recommended Study Plan

Week 1

Information Security Governance Part 1

Domain 1: Information Security Governance (17%)

12-15 hours

Information security strategy aligned with organizational goals
Enterprise governance frameworks (COBIT, ISO 27001)
Information security governance structure
Security policies, standards, and procedures

Recommended Resources:

CISM Review Manual

COBIT Framework

Week 2

Information Security Governance Part 2

Domain 1: Information Security Governance (17%)

10-12 hours

Organizational culture and security awareness
Security metrics and monitoring
Resources and budget management
Ethics and professional standards

Recommended Resources:

ISACA Materials

Case Studies

Week 3

Information Security Risk Management Part 1

Domain 2: Information Security Risk Management (20%)

14-16 hours

Risk identification methodologies
Threat and vulnerability assessment
Asset valuation and classification
Risk analysis techniques (qualitative/quantitative)

Recommended Resources:

Risk Management Guides

NIST RMF

Week 4

Information Security Risk Management Part 2

Domain 2: Information Security Risk Management (20%)

12-14 hours

Risk treatment options
Risk monitoring and reporting
Third-party risk management
Business impact analysis

Recommended Resources:

BIA Templates

Vendor Management

Week 5

Information Security Program Part 1

Domain 3: Information Security Program (33%)

15-18 hours

Program development and management
Security architecture concepts
Security technologies and controls
Security awareness and training programs

Recommended Resources:

Program Management Materials

Security Architecture

Week 6

Information Security Program Part 2

Domain 3: Information Security Program (33%)

15-18 hours

Data protection and privacy
Identity and access management
Network and infrastructure security
Application security

Recommended Resources:

Security Controls Reference

IAM Best Practices

Week 7

Incident Management

Domain 4: Incident Management (30%)

14-16 hours

Incident response planning
Detection and classification
Response and recovery procedures
Post-incident review and lessons learned

Recommended Resources:

Incident Response Playbooks

NIST IR Guide

Week 8

Review and Practice Exams

All Domains - Final Review

20-25 hours

Full-length practice exams
Review weak areas identified
Scenario-based question practice
Exam day preparation and strategies

Recommended Resources:

Practice Exams

Quick Reference Guides

Exam Tips & Strategies

Think Like a Manager

CISM tests your ability to make decisions from a management perspective. Focus on governance, policy, and business impact rather than technical implementation details.

Manage Your Time

With 150 questions in 240 minutes, you have about 1.6 minutes per question. Flag difficult questions and return to them after completing easier ones.

Understand Domain Weights

Domain 3 (Program) and Domain 4 (Incident Management) together account for 63% of the exam. Prioritize these areas while ensuring coverage of all domains.

Master Scenario Questions

Many questions present real-world scenarios requiring you to choose the BEST answer. Focus on what should be done first, what's most important, or what's the primary consideration.

Key Topics to Master

Information Security Governance

Security Policy Development

Risk Assessment Methodologies

Business Impact Analysis

Security Program Management

Security Architecture

Incident Response Planning

Disaster Recovery

Business Continuity

Compliance & Regulations

COBIT Framework

ISO 27001/27002

NIST Frameworks

Security Awareness Training

For the most up-to-date exam information, visit the official exam guide.

View Official Exam Guide