CISM - Certified Information Security Manager
How to prepare for CISM - Certified Information Security Manager
A 5-stage plan from your first study session to exam day. Adjust the pace to your own schedule.
Study plan
| Stage | What to do | Time |
|---|---|---|
| 1 | Familiarize with the four CISM domains Read the official CISM Review Manual and study the high‑level concepts for Governance, Risk Management, Program Development, and Incident Management. | Week 1‑2 |
| 2 | Deep‑dive into each domain Allocate a week per domain, using ISACA’s self‑paced training and group courses to explore policies, risk‑assessment methods, program metrics, and incident‑response frameworks. | Week 3‑5 |
| 3 | Apply knowledge with practice questions Subscribe to the 1,047‑question pool; complete targeted quizzes for each domain and review explanations to solidify understanding. | Week 6‑7 |
| 4 | Full‑length timed mock exam Take a complete practice exam under PSI‑style timing, identify weak spots, and revisit those areas in the Review Manual. | Week 8 |
| 5 | Final review & logistics Refresh key concepts, verify test‑center availability, ensure ID matches registration, and schedule the exam at least 48 hours after payment. | Week 9 |
Exam domains
These come from the official exam outline.
- Information Security Governance
- Information Security Risk Management
- Information Security Program
- Incident Management
CISM - Certified Information Security Manager preparation questions
How many steps are in the CISM - Certified Information Security Manager study plan?
This plan has 5 stages, starting with familiarize with the four CISM domains and ending with final review & logistics.
Do I need prior experience for CISM - Certified Information Security Manager?
CISM - Certified Information Security Manager is rated Advanced. Check the official exam page for any formal requirements before you start.
What should I study for CISM - Certified Information Security Manager?
Focus on the official exam domains: Information Security Governance, Information Security Risk Management, Information Security Program, Incident Management.
Exam outlines change between versions. Check the official exam page for the current outline before you start.