ISACA
Certified Information Security Manager
CISM · active
Catalog review: 2026-10-29. Only cited fields were reviewed; other values are historical planning data. Salary premiums are estimates, not a promise of a raise.
- Exam cost
- Not verified
- Questions · time · passing score
- 150 questions · Other exam details not verified
- Prerequisites
- Not verified — check issuer eligibility
- Estimated salary premium
- Not established by comparable evidence
- Renewal requirements
- Not verified in this audit; confirm with issuer.
- Difficulty
- Not rated
Domains covered
- ** Information security governance
- Risk management frameworks
- Security program development
- Asset management
- Data classification
- Security architecture
- Identity and access management (IAM)
- Security operations
- Incident management
- Business continuity planning (BCP)
- Disaster recovery
- Vendor risk management
Where this credential fits
MyCyberPath career mappings are planning guidance, not universal employer requirements.
Compare this certificationRecent catalog changes
- ISACAupdated
Certified Information Security Manager
Certified Information Security Manager: description. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- The GAQM Certified Information Systems Security Manager (CISSM) is a unique credential designed for individuals with experience managing an information security program. It focuses on aligning security initiatives with business objectives, ensuring effective risk management, and implementing robust governance frameworks. The certification emphasizes a managerial and strategic perspective, enabling candidates to design security policies, oversee security operations, and ensure compliance with legal, regulatory, and industry standards. This certification validates a professional's ability to govern information security, develop and manage information security programs, manage incidents, and understand information risk management. It provides worldwide recognition as an information security manager and offers an opportunity for career growth by building upon existing credentials and demonstrating advanced job skills. The course covers topics such as information security governance, risk management, security program development, asset management, security architecture, identity and access management, security operations, business continuity, vendor risk management, and compliance. While the ISACA CISM is a more widely recognized and established certification in information security management, the GAQM CISSM offers an alternative for professionals seeking a credential from a different vendor. It covers similar core domains of information security management, making it relevant for those in leadership roles within cybersecurity. As a Tier 3 certification, its recognition might be more niche compared to Tier 1 certifications, but it still provides a structured approach to validate managerial skills in information security.
- After
- Security management credential. Revised exam content outline takes effect November 3, 2026; candidates testing before then use the prior outline.
- ISACAupdated
Certified Information Security Manager
Certified Information Security Manager: salary premium low. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- ISACAupdated
Certified Information Security Manager
Certified Information Security Manager: renewal period years. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 3
- After
- Not verified
- ISACAupdated
Certified Information Security Manager
Certified Information Security Manager: cert url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- https://mile2.ca/outlines/CISSM.pdf
- After
- https://www.isaca.org/credentialing/cism
- ISACAprice change
Certified Information Security Manager
Certified Information Security Manager: exam cost usd. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 575
- After
- Not verified
- ISACAexam update
Certified Information Security Manager
Certified Information Security Manager: exam delivery. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- Online through Mile2’s Learning Management System
- After
- Not verified
- ISACAupdated
Certified Information Security Manager
Certified Information Security Manager: vendor url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- ISACAupdated
Certified Information Security Manager
Certified Information Security Manager: salary premium high. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- ISACAupdated
Certified Information Security Manager
Certified Information Security Manager: renewal cost. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- Not publicly available
- After
- Not verified
- ISACAexam update
Certified Information Security Manager
Certified Information Security Manager: exam format. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 100 multiple choice questions, 2 hours, 70% passing score
- After
- 150 questions; current outline remains in force until the announced November 3, 2026 update.