Choosing our ISACA CISM study material, choosing success. Choosing us, choosing high efficiency!
Last Updated: Oct 12, 2026
No. of Questions: 1193 Questions & Answers with Testing Engine
Download Limit: Unlimited
Choosing ActualTestsQuiz CISM actual quiz materials, Pass exam one-shot. The core knowledge of our CISM actual test torrent is compiled based on the latest real questions and similiar with the real test. Also we provide simulation function to help you prepare better. You will feel the real test type and questions style, so that you will feel casual while in the real test after preparing with our CISM actual quiz materials.
ActualTestsQuiz has an unprecedented 99.6% first time pass rate among our customers.
We're so confident of our products that we provide no hassle product exchange.
Everyone wants their goods immediately after paying. ActualTestsQuiz delivers the CISM materials by automatic email within about a minute of payment — the ISACA Certified Information Security Manager bank is yours almost before the receipt is in 2026.
| Certification Vendor: | ISACA |
|---|---|
| Exam Name: | Certified Information Security Manager |
| Exam Number: | CISM |
| Exam Price: | $575 (Member) / $760 (Non-Member) |
| Exam Format: | Multiple Choice |
| Available Languages: | French, German, Spanish, English, Japanese, Chinese-Simplified |
| Certificate Validity Period: | 3 years (requires maintenance fees and CPE) |
| Passing Score: | 450 (out of 800) |
| Related Certifications: | CISM |
| Real Exam Qty: | 150 |
| Exam Duration: | 240 minutes |
| Sample Questions: | DOWNLOAD DEMO |
| Exam Way: | Computer-based testing at authorized PSI testing centers or remotely proctored. |
| Pre Condition: | To earn the CISM certification, candidates must pass the exam and possess a minimum of five years of information security work experience with a minimum of three years of information security management work experience in three or more of the CISM domains. Substitutions and waivers for general information security experience are available. |
| Official Syllabus URL: | https://www.isaca.org/credentialing/cism |
| Section | Weight | Objectives |
|---|---|---|
| Information Security Risk Management | 20% | - Monitor and communicate the information security risk posture - Establish and/or maintain a process for information asset identification, classification, risk assessment and ownership - Determine appropriate risk treatment options - Identify legal, regulatory, organizational and other applicable compliance requirements - Identify and/or recommend risk treatment options - Evaluate information security controls to determine whether they are appropriate and effectively mitigate risk - Ensure that risk assessments, vulnerability assessments and threat assessments are performed consistently, at appropriate times, and to identify acceptable risk - Integrate risk management into business and IT processes |
| Information Security Program Development and Management | 33% | - Establish, communicate and maintain organizational information security standards, guidelines, procedures and other documentation - Establish and/or maintain the information security program in alignment with the information security strategy - Integrate information security requirements into organizational processes - Monitor and manage the information security program - Develop and maintain a security awareness, training and education program for all stakeholders - Align the information security program with the operational objectives of other business functions - Identify, acquire and manage information security requirements for internal and external resources (services, partners, and suppliers) - Establish and maintain information security architectures (people, process, technology) |
| Information Security Incident Management | 30% | - Establish and maintain an incident response plan to ensure an effective and timely response to information security incidents - Develop and implement processes to ensure the timely identification of information security incidents - Establish and maintain incident escalation and notification processes - Establish and maintain an organizational definition of, and severity hierarchy for, information security incidents - Establish and maintain communication plans and processes to manage communication with internal and external entities - Organize, train and equip teams to effectively respond to information security incidents - Establish and maintain processes to investigate and document information security incidents - Test, review and revise the incident response plan |
| Information Security Governance | 17% | - Establish and/or maintain information security policies to guide the development of standards, procedures and guidelines in alignment with enterprise goals and objectives - Obtain commitment from senior management and other stakeholders for the information security program - Establish and/or maintain an information security governance framework and supporting processes to ensure that the information security strategy is aligned with the goals and objectives of the organization - Develop business cases to support investments in information security - Establish, monitor, evaluate and report information security management metrics - Define and communicate the roles and responsibilities for information security throughout the organization - Identify internal and external influences to the organization that affect the information security strategy and program |
ISACA specifies the following prerequisites for the ISACA Certified Information Security Manager: To earn the CISM certification, candidates must pass the exam and possess a minimum of five years of information security work experience with a minimum of three years of information security management work experience in three or more of the CISM domains. Substitutions and waivers for general information security experience are available..
Confirm the authoritative details on the official certification page before you register.
As of the latest information, the passing score for the CISM exam is 450 (out of 800) and the fee is $575 (Member) / $760 (Non-Member). ISACA sets both, so verify the current figures on the official site before scheduling.
Written and dependable. If you fail the corresponding exam within 60 days of purchase, send us a scanned copy of your enrollment slip and your official Score Report PDF within two days of the exam date; verified claims are refunded in full within seven days. Exclusions: exams taken within three days of purchase, candidate names that differ from the payer, and free or expired products. Prefer to keep preparing? Exchange your product for two others of equal value at no charge.
The ISACA Certified Information Security Manager blueprint centers on these principal domains:
Further domains complete the official outline, and our question bank spans every one.
By understanding the constraint first: most of our candidates are office workers, so the CISM bank is elaborately designed for efficiency — focused content with expert-verified answers across the ISACA Certified Information Security Manager objectives, no filler. Safety is engineered in too: payment runs through Credit Card, the world's reliable payment platform, safeguarding the transaction and protecting your interests, so you can buy without misgivings. And because an electronic product cannot be touched before purchase, a free trial download of real bank content lets you see it first — with 24/7 customer service agents ready for any contingency afterward.
Fast — as goods should be after you pay. Upon successful payment, our system automatically emails the product to your mailbox, typically within about a minute, with an instant download link on screen. If nothing arrives within two hours, check your spam folder and contact our 24/7 agents, who give every request immediate attention. Updates are free for 365 days, emailed automatically whenever the bank is revised, with a 50% renewal discount when the period ends. Installations are unlimited throughout.
According to the latest exam information, the CISM exam includes 150 questions and lasts 240 minutes minutes. Practicing under the same limit builds the pacing confidence you will want on the day.
Of the following, who is BEST positioned to approve specific information security risk treatment options?
Correct Answer: C 🗳️
Explanation: Only visible for ActualTestsQuiz members. You can sign-up / login (it's free).
An incident response team recently encountered an unfamiliar type of cyber event. Though the team was able to resolve the issue, it took a significant amount of time to identify. What is the BEST way to help ensure similar incidents are identified more quickly in the future?
Correct Answer: A 🗳️
Explanation: Only visible for ActualTestsQuiz members. You can sign-up / login (it's free).
Which of the following is MOST helpful in determining whether a phishing email is malicious?
Correct Answer: A 🗳️
Who is accountable for approving an information security governance framework?
Correct Answer: D 🗳️
Explanation: Only visible for ActualTestsQuiz members. You can sign-up / login (it's free).
Which of the following BEST indicates that information assets are classified accurately?
Correct Answer: A 🗳️
Explanation: Only visible for ActualTestsQuiz members. You can sign-up / login (it's free).
Constance
Evangeline
Janice
Mabel
Nina
Salome
ActualTestsQuiz is the world's largest certification preparation company with 99.6% Pass Rate History from 70230+ Satisfied Customers in 148 Countries.
Over 70230+ Satisfied Customers
