Search...

Quick Feedback

CISM Study Guide

Domain-by-domain study guide for CISM - Certified Information Security Manager (CISM). Covers all 4 exam objectives with topic checklists, quick notes, and practice links.

Download PDF Notes

Exam Overview

Key facts before you start studying

Duration

240 min

Questions

150

Exam Code

CISM

Domains

Quick Navigation

Jump to a specific exam domain

1. Information Security Governance (17%)
2. Information Risk Management (20%)
3. Information Security Program (33%)
4. Incident Management (30%)

Domain 1

17%

Information Security Governance

Establish and maintain an information security governance framework

Topics to Master

Enterprise governance
Information security strategy
Governance framework and standards
Strategic planning

Domain 2

20%

Information Risk Management

Manage information risk to an acceptable level

Topics to Master

Risk identification
Risk assessment and analysis
Risk response and mitigation
Risk monitoring and reporting

Domain 3

33%

Information Security Program

Develop and manage the information security program

Topics to Master

Security program development
Security program management
Security controls
Security awareness and training

Domain 4

30%

Incident Management

Plan, establish, and manage incident response capability

Topics to Master

Incident response planning
Incident detection and analysis
Incident containment and recovery
Post-incident review

Continue Your Prep

Free CertStud resources for CISM

Study Notes Exam Study Plan Start Practice Test

Back to CISM

CISM Study Guide

Domain-by-domain study guide for CISM - Certified Information Security Manager (CISM). Covers all 4 exam objectives with topic checklists, quick notes, and practice links.

Download PDF Notes

Exam Overview

Key facts before you start studying

Duration

240 min

Questions

150

Exam Code

CISM

Domains

Quick Navigation

Jump to a specific exam domain

1. Information Security Governance (17%)
2. Information Risk Management (20%)
3. Information Security Program (33%)
4. Incident Management (30%)

Domain 1

17%

Information Security Governance

Establish and maintain an information security governance framework

Topics to Master

Enterprise governance
Information security strategy
Governance framework and standards
Strategic planning

Domain 2

20%

Information Risk Management

Manage information risk to an acceptable level

Topics to Master

Risk identification
Risk assessment and analysis
Risk response and mitigation
Risk monitoring and reporting

Domain 3

33%

Information Security Program

Develop and manage the information security program

Topics to Master

Security program development
Security program management
Security controls
Security awareness and training

Domain 4

30%

Incident Management

Plan, establish, and manage incident response capability

Topics to Master

Incident response planning
Incident detection and analysis
Incident containment and recovery
Post-incident review

Continue Your Prep

Free CertStud resources for CISM

Study Notes Exam Study Plan Start Practice Test