ISACA CISM – Certified Information Security Manager
Exam overview, official domain weights and free sample questions. Subscribers get 230 practice questions, 109 flashcards, 7 labs, a study guide and video lessons for this exam.
Exam at a glance
- Exam code
- CISM
- Questions
- 150
- Time
- 240 minutes
- Question types
- multiple choice (one best answer, four options)
- Passing score
- 450 on a scaled score of 200–800
- Exam fee
- US$575 (ISACA member) / US$760 (non-member)
- Delivery
- PSI testing center, remote proctored
- Prerequisites
- To take the exam: none. To get certified: 5 years of information security management experience across at least 3 of the 4 domains, gained in the 10 years before applying, and a US$50 application fee. You must apply within 5 years of passing
- Renewal
- 120 CPE hours per 3-year cycle, with at least 20 CPE hours per year, plus annual maintenance fees
- Version notes
- not published
From the official exam page (checked 2026-11-09). Always confirm details with the vendor: official exam page, official objectives.
Domains and weights
- 1A Enterprise Governance
- 1B Information Security Strategy
- 2A Information Security Risk Identification and Assessment
- 2B Information Security Risk Response
- 3A Information Security Program Development
- 3B Information Security Program Management
- 4A Incident Management Readiness
- 4B Incident Management Operations
Free sample questions
Original questions in the style of the exam. Pick an answer to see the explanation.
An information security manager is starting a program at a company where security has been treated as an IT-only issue. Which factor is MOST critical to the program's long-term success?
An organization is starting its first enterprise information security risk assessment. What should be done FIRST?
What is the PRIMARY objective of an information security program?
Unlock every question, lab and guide
Full access to all 20 certifications for $4.99/month. Cancel anytime.