Confidence before and after purchase comes from transparency. LatestCram shows the demo first, publishes the refund terms plainly, and answers questions around the clock.
ISACA CISM 中文 Exam Overview:
| Certification Vendor: | ISACA |
|---|---|
| Exam Name: | Certified Information Security Manager (CISM) Exam |
| Exam Number: | CISM |
| Passing Score: | 450 (scaled score 200–800) |
| Exam Duration: | 240 minutes |
| Available Languages: | Chinese (Simplified), English, Japanese, Korean, Spanish |
| Real Exam Qty: | 150 |
| Related Certifications: | CDPSE CGEIT CRISC CISA |
| Exam Format: | Computer-based, Multiple choice, Linear format |
| Certificate Validity Period: | 3 years |
| Exam Price: | USD 575 (ISACA member), USD 760 (non-member) |
| Recommended Training: | CISM Online Review Course CISM Review Manual |
| Exam Registration: | ISACA Official Registration |
| Sample Questions: |  |
| Exam Way: | Computer-based testing at PSI authorized centers or remotely proctored online |
| Pre Condition: | No mandatory exam prerequisites; certification requires 5+ years of professional information security management experience, with at least 3 years across 3+ domains, within 10 years before application or 5 years after passing exam |
| Official Syllabus URL: | https://www.isaca.org/credentialing/cism/cism-exam-content-outline |
ISACA CISM 中文 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Incident Management | 30% | - Post-incident review and improvement - Incident response planning and preparation - Containment, eradication and recovery - Business continuity and disaster recovery coordination - Detection, analysis and classification of incidents - Stakeholder communication and reporting |
| Topic 2: Information Security Risk Management | 20% | - Risk response and treatment strategies - Third-party and supply chain risk management - Risk monitoring, reporting and communication - Threat and vulnerability analysis - Risk identification and assessment |
| Topic 3: Information Security Governance | 17% | - Align security strategy with business objectives - Monitor compliance and regulatory requirements - Define security roles, responsibilities and organizational structure - Establish and maintain governance framework - Develop and maintain policies, standards and procedures |
| Topic 4: Information Security Program | 33% | - Security architecture and control design - Control implementation, testing and evaluation - Security awareness, training and education - Program development and alignment with strategy - Resource management, budget and staffing - Program performance measurement and reporting |
CISM 中文 Exam FAQ: Safe, Unlimited, Always Current
Three versions of the same study materials: a printable, expert-prepared PDF with free demo download and instant access; a Desktop Test Engine for Windows with customizable simulation and timed modes that works offline; and an Online Test Engine for any browser on Windows, Mac, Android, and iOS with test history and performance review. All 1193 practice questions are identical across versions. Every purchase includes 365 days of free updates, a 50% renewal discount afterward, and unlimited computer installations.
The ISACA Certified Information Security Manager (CISM中文版) exam requires 450 (scaled score 200–800) to pass, and registration costs USD 575 (ISACA member), USD 760 (non-member). A failed attempt means paying the same fee again — a readiness check with the LatestCram engines before booking is the cheaper option.
The CISM 中文 exam is a ISACA certification exam validating the ISACA Certified Information Security Manager (CISM中文版) syllabus shown above. It belongs to these credential paths: CISA, CRISC, CGEIT, CDPSE. Candidates in 2026 start with LatestCram's 1193 practice questions, available as a printable PDF, a Windows Desktop Test Engine, and an Online Test Engine — three versions of the same materials.
LatestCram issues a full refund if you take the ISACA Certified Information Security Manager (CISM中文版) exam within 60 days of purchase and do not pass. The policy does not apply if the exam is taken within 3 days of purchase, if the exam was never actually taken, or to free materials or expired orders, and the candidate name must match the payer name. Submit a scan of your enrollment slip and the official Score Report PDF within 2 days of the exam; claims are processed within 7 days. Alternatively, exchange for two free exam products of equal value and keep your original update service. Orders arrive by email within 1 minute — contact support if nothing arrives within 2 hours.
The official ISACA Certified Information Security Manager (CISM中文版) outline defines 4 domains. The leading three are Information Security Governance (17%), Information Security Program (33%), and Information Security Risk Management (20%). The full list is in the topics section above, and LatestCram's 1193 practice questions cover each one.
No mandatory exam prerequisites; certification requires 5+ years of professional information security management experience, with at least 3 years across 3+ domains, within 10 years before application or 5 years after passing exam Since requirements change over time, confirm the latest on the official ISACA exam page before scheduling.
The ISACA Certified Information Security Manager (CISM中文版) exam contains 150 to complete within 240 minutes. Timed simulation in the LatestCram Desktop Test Engine teaches that rhythm before exam day does.
ISACA recommends these training resources for the ISACA Certified Information Security Manager (CISM中文版) exam:
Follow the training with steady self-testing — the 1193 practice questions from LatestCram help you apply theory and fill any gaps the training leaves.
Computer-based testing at PSI authorized centers or remotely proctored online Register for the ISACA Certified Information Security Manager (CISM中文版) exam through these official channels:
After booking, LatestCram delivers your practice questions within 1 minute — preparation starts the same day.
ISACA Certified Information Security Manager (CISM中文版) Sample Questions:
信息安全经理得知业务部门领导正在鼓励员工更多地使用社交媒体平台来触达客户。为了降低员工在社交媒体上泄露机密信息的风险，以下哪项措施应该首先实施？
- A. 限制企业设备上的社交媒体访问。
- B. 制定全公司范围的社交媒体政策。
- C. 制定针对滥用社交媒体网站的制裁措施。
- D. 监控员工访问的社交媒体网站。
Correct Answer: B 🗳️
Explanation: Only visible for LatestCram members. You can sign-up / login (it's free).
制定事件升级流程时，最佳方法是根据以下因素对事件进行分类：
- A. 恢复点目标(RPO)。
- B. 预计恢复时间。
- C. 它们的根本原因。
- D. 受影响的信息资产。
Correct Answer: D 🗳️
Explanation: Only visible for LatestCram members. You can sign-up / login (it's free).
在软件项目的系统开发生命周期(SDLC)的启动阶段，信息安全活动应着重解决以下问题：
- A. 安全目标。
- B. 基准安全指标。
- C. 成本效益分析。
- D. 基本安全控制。
Correct Answer: A 🗳️
Explanation: Only visible for LatestCram members. You can sign-up / login (it's free).
以下哪项能够得出最准确的控制评估结果？
- A. 完善的安全策略
- B. 成熟的变更管理流程
- C. 未事先通知的测试
- D. 高层管理支持
Correct Answer: C 🗳️
Explanation: Only visible for LatestCram members. You can sign-up / login (it's free).
以下哪项是防止通过社会工程手段未经授权访问企业网络的最佳技术防御措施？
- A. 需要挑战/回应信息
- B. 强制频繁更改密码
- C. 需要多因素身份验证
- D. 强制执行复杂密码格式
Correct Answer: C 🗳️
Explanation: Only visible for LatestCram members. You can sign-up / login (it's free).
