Certified Information Security Manager (CISM)

Certified Information Security Manager (CISM)

₹0 ₹0 Save ₹0
CISM validates expertise in information security governance, risk management, incident response, and program development, focusing on managing and aligning security with business goals.

Exam Information

Exam Pattern

Multiple-choice questions Computer-based testing (in-person or remote proctoring) Questions test scenario-based decision-making and management-level understanding
Exam Code
CISM
Total Questions
150
Duration
4 hours (240 minutes)
Passing Marks
450
Languages
English Spanish French German Chinese (Simplified) Japanese

Exam Description

The Certified Information Security Manager (CISM) certification, offered by ISACA, is a globally recognized credential for professionals who design, manage, and oversee enterprise information security programs.

CISM emphasizes management, governance, and strategic security leadership rather than purely technical skills. It validates a professional’s ability to:

  • Establish and manage an information security program

  • Govern enterprise security aligned with business objectives

  • Identify and manage information security risks

  • Develop and manage incident response and recovery strategies

CISM is widely respected and often required for security managers, CISOs, risk managers, and governance professionals.

Similar Products

Save ₹0
Certified Information Systems Auditor (CISA)

Certified Information Systems Auditor (CISA)


₹0 ₹0

Frequently Asked Questions

CISM is a globally recognized certification from ISACA that validates expertise in managing, governing, and overseeing enterprise information security programs.
Ideal for: • Information Security Managers • CISOs and Deputy CISOs • Risk & Compliance Managers • Security Consultants • IT Managers with security responsibilities
No. CISM is management-focused, emphasizing governance, risk, and strategy rather than hands-on technical implementation.
Yes. ISACA requires 5 years of information security work experience, with possible waivers of up to 2 years based on education or other certifications.
CISM is valid for 3 years and requires earning Continuing Professional Education (CPE) credits to maintain certification.
The exam covers four domains: 1. Information Security Governance 2. Information Risk Management 3. Information Security Program Development and Management 4. Information Security Incident Management

Enroll Now