CISM
Certified Information Security Manager · ISACA
The CISM certifies the ability to manage a security programme: governance, risk management, building and running the programme, and incident management. With the CISSP, it is the certification most often requested for CISO and security manager roles, and it is well known in France, notably in banking and large groups. Its strength is a resolutely managerial angle aligned with the business; its limit is that it says little about technical skills.
- Exam
- 150 multiple-choice questions in 4 h, scaled score from 200 to 800 with a pass mark of 450. New exam content outline from 3 November 2026: same four domains, architecture content added.
- Exam price
- $575ISACA member price; non-members pay US$760. A US$50 application fee is due when applying for certification after passing.
- Required experience
- Five years of information security management experience across at least three of the four domains, within the ten years before applying (apply within five years of passing). Waivers of up to two years are possible.
- Validity and maintenance
- At least 20 CPE hours per year and 120 over 3 years, plus an annual fee of US$45 (members) or US$85 (non-members).
- Format
- Multiple choice
- Recognition
- ISO/IEC 17024 accredited · DoD 8140 approved
Who is it for?
Security managers, CISOs and deputy CISOs, GRC consultants and IT managers taking on security responsibilities, with five years of experience in information security management.
Domains covered
- Information security governance: 17% (18% from 3 November 2026)
- Information security risk management: 20%
- Information security programme: 33%
- Incident management: 30% (29% from 3 November 2026)
- From 3 November 2026: enterprise and information security architecture
Belinda’s take
Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.
The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.
