A credential backed by ISACA carries real weight with hiring managers, and the ISACA Certified Information Security Manager exam is how you earn one. Preparing with the 1193 practice questions from LatestCram keeps every study hour focused on what the exam actually asks.

ISACA CISM Exam Overview:

Certification Vendor:	ISACA
Exam Name:	Certified Information Security Manager
Exam Number:	CISM
Related Certifications:	CISM
Passing Score:	450 (out of 800)
Exam Duration:	240 minutes
Exam Format:	Multiple Choice
Exam Price:	$575 (Member) / $760 (Non-Member)
Real Exam Qty:	150
Certificate Validity Period:	3 years (requires maintenance fees and CPE)
Available Languages:	Spanish, French, German, Chinese-Simplified, English, Japanese
Sample Questions:
Exam Way:	Computer-based testing at authorized PSI testing centers or remotely proctored.
Pre Condition:	To earn the CISM certification, candidates must pass the exam and possess a minimum of five years of information security work experience with a minimum of three years of information security management work experience in three or more of the CISM domains. Substitutions and waivers for general information security experience are available.
Official Syllabus URL:	https://www.isaca.org/credentialing/cism

ISACA CISM Exam Syllabus Topics:

Section	Weight	Objectives
Information Security Incident Management	30%	- Test, review and revise the incident response plan - Develop and implement processes to ensure the timely identification of information security incidents - Establish and maintain incident escalation and notification processes - Establish and maintain an incident response plan to ensure an effective and timely response to information security incidents - Establish and maintain communication plans and processes to manage communication with internal and external entities - Establish and maintain processes to investigate and document information security incidents - Organize, train and equip teams to effectively respond to information security incidents - Establish and maintain an organizational definition of, and severity hierarchy for, information security incidents
Information Security Risk Management	20%	- Ensure that risk assessments, vulnerability assessments and threat assessments are performed consistently, at appropriate times, and to identify acceptable risk - Monitor and communicate the information security risk posture - Integrate risk management into business and IT processes - Identify legal, regulatory, organizational and other applicable compliance requirements - Evaluate information security controls to determine whether they are appropriate and effectively mitigate risk - Establish and/or maintain a process for information asset identification, classification, risk assessment and ownership - Determine appropriate risk treatment options - Identify and/or recommend risk treatment options
Information Security Governance	17%	- Establish and/or maintain information security policies to guide the development of standards, procedures and guidelines in alignment with enterprise goals and objectives - Obtain commitment from senior management and other stakeholders for the information security program - Identify internal and external influences to the organization that affect the information security strategy and program - Establish and/or maintain an information security governance framework and supporting processes to ensure that the information security strategy is aligned with the goals and objectives of the organization - Develop business cases to support investments in information security - Define and communicate the roles and responsibilities for information security throughout the organization - Establish, monitor, evaluate and report information security management metrics
Information Security Program Development and Management	33%	- Monitor and manage the information security program - Identify, acquire and manage information security requirements for internal and external resources (services, partners, and suppliers) - Establish and maintain information security architectures (people, process, technology) - Integrate information security requirements into organizational processes - Establish, communicate and maintain organizational information security standards, guidelines, procedures and other documentation - Establish and/or maintain the information security program in alignment with the information security strategy - Develop and maintain a security awareness, training and education program for all stakeholders - Align the information security program with the operational objectives of other business functions

Common Questions About the ISACA Certified Information Security Manager Exam

What exactly is the CISM certification exam?

The ISACA Certified Information Security Manager exam is the official ISACA test registered under exam code CISM. Passing it earns you the Isaca Certification certification, a credential at the Manager level. It is also linked to the related certification: CISM. ISACA exams are valued because they test job-ready skills, so a passing score here carries real weight on a resume.

How many questions are on the CISM exam, and how long does it last?

The ISACA Certified Information Security Manager exam includes 150 questions to be completed within 240 minutes. Do the pacing math before exam day: with that many items on the clock, you need a steady rhythm and the discipline to flag a hard question and move on instead of stalling. Two or three full timed sessions with the LatestCram test engine will show you exactly what that pace feels like, so time pressure stops being a factor on the real day.

What is the passing score for the CISM exam, and what does it cost?

To pass the ISACA Certified Information Security Manager exam you need 450 (out of 800), and the official registration fee is $575 (Member) / $760 (Non-Member). A retake is not discounted: a failed attempt means paying the full $575 (Member) / $760 (Non-Member) again, so treat your first sitting as the expensive one. A sensible rule is to book your seat only after you are scoring comfortably above the passing mark on the LatestCram practice tests, not just squeaking past it once.

Are there any prerequisites for taking the CISM exam?

To earn the CISM certification, candidates must pass the exam and possess a minimum of five years of information security work experience with a minimum of three years of information security management work experience in three or more of the CISM domains. Substitutions and waivers for general information security experience are available.

Eligibility rules do change from time to time, so confirm the current requirements before you register on the official exam page.

Can I try the CISM practice questions before I buy?

Yes. LatestCram offers a free PDF demo of the ISACA Certified Information Security Manager material so you can judge the question quality and format before spending anything. After purchase, your license includes 365 days of free updates, and if you want to keep receiving updates after that period, renewals are available at a 50% discount.

What happens if I fail the CISM exam, and how is my order delivered?

If you take the ISACA Certified Information Security Manager exam within 60 days of your purchase and do not pass, LatestCram backs you with a 100% money-back guarantee. The claim must match the exam your product covers: attempts taken within 3 days of purchase are not eligible (that is too little preparation time), and neither are downloaded-but-unused products, free materials, or expired orders. The candidate name must match the payer name, and you need to submit a scanned enrollment slip plus the official Score Report PDF within 2 days of the exam; claims are processed within 7 days. Prefer not to refund? You can swap instead and receive two other exam products of equal value for free while keeping the update service on your original purchase.

Delivery itself is instant: your files are downloadable right away and emailed to you within one minute of payment. If nothing arrives within 2 hours, contact customer service. There is no limit on how many computers you may install the software on.

What topics are covered in the CISM exam?

The official ISACA Certified Information Security Manager syllabus is organized into 4 domains. Key areas include Information Security Incident Management (30%), Information Security Program Development and Management (33%), and Information Security Governance (17%). The complete, up-to-date topic list appears in the exam topics section above; work through it line by line and flag anything you cannot yet explain in your own words.

ISACA Certified Information Security Manager Sample Questions:

Question #1

In a call center, the BEST reason to conduct a social engineering is to:

A. Identify candidates for additional security training.
B. minimize the likelihood of successful attacks.
C. gain funding for information security initiatives.
D. improve password policy.

Reveal Solution Discussion 0

Correct Answer: A 🗳️