The CISM Campus

Complete resources to ensure you achieve and maintain your CISM qualification.

Established in 2002, the Certified Information Security Manager (CISM) qualification is awarded by ISACA® and is a globally accepted standard of achievement among information security, information systems (IS) audit and IT governance professionals.

IT Governance offers a complete range of products, including study guides and training, which are designed to help you pass the CISM examination at the first attempt.

Want more information?

For advice and guidance on how you can achieve and maintain the CISM qualification, get in touch with one of our experts today.

Speak to an expert

Studying for your Certified Information Security Manager (CISM) examination

Our complete range of CISM study guides and training services:

What are the requirements for the CISM qualification?

The CISM certification is awarded to candidates with at least five years of relevant work experience, who pass a rigorous written examination.

ISACA defines four CISM domains on which you will be examined:

Domain 1 - Information Security Governance (24% of exam)
Domain 2 - Information Risk Management and Compliance (30% of exam)
Domain 3 - Information Security Program Development and Management (27% of exam)
Domain 4 - Information Security Incident Management (19% of exam)

For more information, please see the official CISM 'How to Become Certified' web page.

Certified Information Security Manager (CISM) Training Course

CISM - Certified Information Security Manager Training Course

The Certified Information Security Manager (CISM) Training Course is designed to ensure that you pass the ISACA CISM examination at the first attempt.

Delivered in just four days, this course has been designed to maximise time effectiveness and reduce any unnecessary time away from the office. It has also been shown to be more considerably more effective than self-study preparation, which requires more time and commitment.

Find out more

How do you pass the CISM exam at the first attempt?

We recommend the following actions:

Check that you have the relevant five years of work experience to qualify
Register and schedule your exam direct with ISACA
Purchase the official ISACA study guides and third-party textbooks
Plan a self-study programme that covers all of the key knowledge domains
Attend an exam preparation training course a few days before you sit the exam

How to register and schedule the CISM exam

Starting in 2017, the CISM exam will be offered via a computer-based testing (CBT) session, which is available during three testing windows per year. All candidates must first register online direct with ISACA and pay for the examination in advance. They will then receive email instructions on how to schedule an exam appointment at a local PSI exam centre. For the - 1 June – 23 September 2018 window only. For further information, please review the ISACA Exam Candidate Information Guide for 2018 Exams.

Key Exam Registration Dates

1 October 2018 - 24 January 2019 Testing Window

1 October 2018:
Registration and Scheduling Opens

18 January 2019:
Final Registration Deadline 

1 February - 24 May 2019 Testing Window

1 November 2018:
Registration and Scheduling Opens

18 May 2019:
Final Registration Deadline 

23 May 2019:
Final Scheduling Deadline 

Essential CISM books and study guides

As preparation is essential to passing the CISM examination, we strongly recommend that all delegates purchase the CISM exam and study guides before taking the relevant course. IT Governance is the exclusive approved reseller of ISACA publications in the UK and all titles are available from our dedicated ISACA Certification Bookstore.

We particularly recommend that you purchase the Official CISM Exam Passport package, which contains copies of the CISM Review Manual, 15th Edition, and the CISM Review Questions, Answers and Explanations Manual, 9th Edition.

Continuing Professional Education

There is a Continuing Professional Education (CPE) policy in respect of qualified CISM professionals. The goal of this policy is to ensure that all CISMs maintain an adequate level of current knowledge and proficiency in the field of information systems audit, control and security.

CISMs who successfully comply with the ‘continuing professional education policy will be better trained to assess information systems and technology and provide leadership and value to their organisations’. The responsibility for setting the CPE requirements rests with the CISM Certification Board which oversees the process and requirements to ensure their applicability.

Maintenance fees and a minimum of 20 contact hours of CPE are required annually. In addition, a minimum of 120 contact hours are required during a fixed three-year period. Please see the Maintain Your CISM page on ISACA’s website for further details.