Certified Information Security Manager

Exam cost

Not verified

Questions · time · passing score

150 questions · Other exam details not verified

Prerequisites

Not verified — check issuer eligibility

Estimated salary premium

Not established by comparable evidence

Renewal requirements

Not verified in this audit; confirm with issuer.

Difficulty

Not rated

Domains covered

• Information security governance and strategy development
• Information security risk assessment and management
• Information security program development and management
• Information security incident management and response
• Compliance with legal, regulatory, and contractual requirements
• Development of security policies and procedures
• Business continuity and disaster recovery planning
• Security architecture and engineering principles (management perspective)
• Vendor management and third-party risk assessment
• Security awareness and training program development
• Crisis management and communication
• Strategic alignment of security with business objectives

Where this credential fits

MyCyberPath career mappings are planning guidance, not universal employer requirements.

• GRC Director→CISO →
• CISO/Board Advisor →
• Security Manager/IT-to-Cyber →
• IoT/OT Security →

Recent catalog changes

1. ISACAupdated2026-10-29

   Certified Information Security Manager

   Certified Information Security Manager: description. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   The Certified Information Security Manager (CISM) certification from ISACA validates an individual’s expertise in information security governance, program development and management, incident management, and risk management. It is designed for information security managers and those who manage, design, oversee, and assess an enterprise’s information security. The CISM certification is globally recognized and signifies a professional’s ability to align information security programs with broader business goals, manage and mitigate risks, and effectively respond to security incidents 1.

   After

   Security management credential. Revised exam content outline takes effect November 3, 2026; candidates testing before then use the prior outline.

   Review source
2. ISACAupdated2026-10-29

   Certified Information Security Manager

   Certified Information Security Manager: vendor url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   Not verified

   After

   https://www.isaca.org/credentialing/cism

   Review source
3. ISACAexam update2026-10-29

   Certified Information Security Manager

   Certified Information Security Manager: exam delivery. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   Computer-based and administered at authorized PSI testing centers globally or as remotely proctored exams.

   After

   Not verified

4. ISACAupdated2026-10-29

   Certified Information Security Manager

   Certified Information Security Manager: salary premium high. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   20

   After

   Not verified

   Review source
5. ISACAupdated2026-10-29

   Certified Information Security Manager

   Certified Information Security Manager: prerequisites. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   5 years of experience in Information Security Management, with a minimum of 3 years in 3 out of 4 CISM job practice areas. Experience must be within 10 years. Waivers available for CISA, CISSP, or related degrees.

   After

   Not verified

6. ISACAupdated2026-10-29

   Certified Information Security Manager

   Certified Information Security Manager: renewal cost. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   US$45 for members, US$85 for non-members (annual maintenance fee)

   After

   Not verified

7. ISACAupdated2026-10-29

   Certified Information Security Manager

   Certified Information Security Manager: renewal period years. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   3

   After

   Not verified

8. ISACAprice change2026-10-29

   Certified Information Security Manager

   Certified Information Security Manager: exam cost usd. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   575

   After

   Not verified

9. ISACAupdated2026-10-29

   Certified Information Security Manager

   Certified Information Security Manager: salary premium low. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

   What changed

   Before

   10

   After

   Not verified

   Review source
10. ISACAexam update2026-10-29

    Certified Information Security Manager

    Certified Information Security Manager: exam format. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed

    Before

    150 multiple-choice questions, 4-hour time limit.

    After

    150 questions; current outline remains in force until the announced November 3, 2026 update.

    Review source

Sources and verification

• https://www.isaca.org/credentialing/cism
• https://www.isaca.org/credentialing/cism/cism-exam-content-outline