Isaca CISM Tests

ISACA is an international professional association focused on IT governance.

The Certified Information Security Manager (CISM) certification has become a leading credential for the management side of information security. CISM promotes international security practices and recognizes individuals who design, develop and oversee an enterprise's information security.

The CISM certification demonstrates candidate’s understanding of the relationship between an information security program and broader business goals and objectives.

To achieve the CISM certification, candidates must pass the CISM exam, provide proof of work experience (a minimum of five years of professional-level information security; three years must be as a security manager in at least three of the job practice areas) and complete the application. Reported experience must be current (within 5 years of passing the exam or within 10 years preceding the application date). If the applicant does not meet the CISM certification requirements within the five-year period, the passing score will be voided.

The exam covers four job practice areas:
- Information security governance
- Information risk management
- Information security program development and management
- Information security incident management

Once a CISM candidate has passed the CISM certification exam and has met the work experience requirements, the final step is to complete the CISM Application for Certification.