Certified Information Security Manager

CISM

The Certified Information Security Manager (CISM) is a certification designed for individuals who manage, design, and implement information security programs.

Focus

The Certified Information Security Manager certification focuses on ISACA

Exam Duration

The Certified Information Security Manager exam duration is 4 hours

Num of Question

The exam contains a total of 150

Exam Fee

The exam fee is $575 (ISACA members) / $725 (nonmembers).

Exam Validity

The CCRN-Pediatric certification is valid for Three years from the date you pass the exam.

Prior Certification

• N/A

Exam Format

The Certified Information Security Manager exam is a Computer-based exam

Passing Conditions

To pass Certified Information Security Manager exam, applicants must achieve a minimum score of Cumulative score: 450/500 (by category), 60% or more

Who Should Take

Information security professionals, security managers, and management level experts.

• Information Security Manager
• Information Security Director
• Chief Information Security Officer (CISO)

Prerequisites

Five or more years of information security work experience in at least three of the seven domains of CISM (or any related field).

Or can substitute with certifications:

• CISM Associate designation
• Two to five years of work experience in any ISACA certification exam, and earn an additional three credits from the ISACA knowledge self-assessment (KSA)

Certification Process

• Download the CISM Exam Content Outline, providing a clear understanding of the exam objectives.
• Using this content outline, the candidate prepares for the exam over three to four months through self-study.
• Scheduling the exam through a designated Prometric testing center
• Candidates should prepare, and when ready, they take the exam at a Prometric testing center.

Domains with Weights

• Domain 1: Information Security Governance (24% of the exam) (24): IS domains through risk (enterprise) value systems to IT governance and IT portfolios. CISM certification holder who plans, or directs.
• Domain 2: Information Risk Management (31% of the exam) (31): ISACA governance and monitoring processes
• Domain 3: Information Security Program Management (23% of the exam) (23): Security compliance auditing
• Domain 4: Incident Management (22% of the exam) (22): Information security governance within managed service provider organization