MyCyberPath

Certification comparison

CISM vs CISA — Certification Comparison

Compare CISM and CISA: exam cost, requirements, renewal, salary evidence and career-path fit.

Historical planning data unless explicitly verified. Unknown is not zero; confirm eligibility and current pricing with the issuer.

CISM

Certified Information Security Manager · ISACA

Exam cost
Not verified
Questions · time · passing score
150 questions · Other exam details not verified
Prerequisites
Not verified — check issuer eligibility
Domains covered
Information security governance and strategy development · Information security risk assessment and management · Information security program development and management · Information security incident management and response · Compliance with legal, regulatory, and contractual requirements · Development of security policies and procedures · Business continuity and disaster recovery planning · Security architecture and engineering principles (management perspective) · Vendor management and third-party risk assessment · Security awareness and training program development · Crisis management and communication · Strategic alignment of security with business objectives
Estimated salary premium
Not established by comparable evidence
Renewal · CPE / CEU
Not verified in this audit; confirm with issuer.
Difficulty
Not rated
MyCyberPath metro lines
GRC Director→CISO · CISO/Board Advisor · Security Manager/IT-to-Cyber · IoT/OT Security
Best for
Information Security Manager · IT Security Director · Security Program Manager · GRC Manager

Catalog review: 2026-10-29. Only cited fields were reviewed; other values are historical planning data.

CISA

Certified Information Systems Auditor · ISACA

Exam cost
$760 (historical)
Questions · time · passing score
150 questions, multiple choice · 240 minutes · Pass: 450/800
Prerequisites
5 years IS auditing experience
Domains covered
Security & Risk Management · Security Assessment & Testing · Management & Leadership
Estimated salary premium
Not established by comparable evidence
Renewal · CPE / CEU
3-year cycle · 20 CPE/CEU credits per year
Difficulty
Not rated
MyCyberPath metro lines
GRC Director→CISO · Federal CISO
Best for
IT Auditor · GRC Analyst

Historical catalog data — verify exam details and pricing with the issuer.

Explore certification comparisons