Certified Information Security Manager
CISM validates expertise in information security governance, program development, incident management, and risk management. It is designed for professionals who manage, design, and oversee enterprise information security programs.
Exam Format
Computer-Based Testing (CBT)
Prerequisites
5 years information security experience, at least 3 years in IS management across 3+ CISM domains. Up to 2 years waivable.
Exam Cost
$625 (ISACA member) — $810 (non-member)
CPE Requirement
120 CPE hours over 3-year cycle (minimum 20/year)
Available In
Global, North America, Europe, +1
Industry Pass Rate
Approximately 50–60% (ISACA does not publish official rates)
Exam Overview
Total Questions
150
Computer-Based Testing (CBT)
Exam Duration
4h
~1.6 min per question
Passing Score
450 / 800 (scaled; range 200–800)
Scaled score system
Exam Domains
4
Knowledge areas tested
Exam Domains
Understand the weight and coverage of each exam domain to prioritize your study time effectively.
Key Topics
Study Plan
A proven three-phase approach to mastering the CISM exam. Our AI personalizes this plan to your schedule and strengths.
Weeks 1-4
Weeks 5-8
Weeks 9-12
AI Study Tools
Every CISM student gets access to our full AI toolkit, designed to maximize retention and minimize wasted study time.
AI extracts and ranks the most exam-relevant CISM concepts by domain weight, with cross-references to related topics.
Visual concept maps for each CISM domain showing how frameworks, standards, and processes interconnect.
After every practice session, AI identifies your specific CISM knowledge gaps and adjusts your study plan.
Unlimited AI-generated practice questions calibrated to real CISM exam difficulty, targeting your weak areas.
Practice
Test your knowledge with questions that mirror the real exam in difficulty and format. Select an answer to see the detailed explanation.
A newly appointed information security manager discovers that the organization lacks a formal information security governance framework. What should be the FIRST step in establishing one?
These are just 3 of the 50,000+ practice questions available in NexusGRC Academy. Start your free trial to access the full question bank.
Industry Data
Understanding the exam difficulty helps you plan the right amount of preparation time.
Industry Pass Rate
Approximately 50–60% (ISACA does not publish official rates)
NexusGRC Academy provides AI-powered study tools, adaptive practice exams, and personalized study plans to help you beat the odds on the CISM exam.
From the Blog
Free Resources
Side-by-side comparison of CIA, CISA, CISM, CRISC, CFE, and ISO certifications. Covers prerequisites, costs, career paths, and salary benchmarks.
Everything you need to prepare for exam day: required documents, time management strategies, mental preparation tips, and last-minute review points.
A customizable study plan template that breaks down your certification preparation into weekly milestones with built-in review cycles and mock exam scheduling.
One-page summaries for each of the four CISM domains. Key frameworks, definitions, and relationships distilled for quick revision before the exam.
FAQ
Common questions about the CISM exam and NexusGRC Academy preparation.
Join thousands of professionals who passed the CISM exam with NexusGRC Academy. 7-day free trial, no credit card required.