ISACA CISM® Exam Practice
Certified Information Security Manager
Practice for the ISACA CISM® exam
Prepare for the ISACA CISM exam across all four domains — security governance, risk management, the security programme and incident management.
ISACA's new CISM exam outline takes effect on 3 November 2026: the four domains stay, the weights shift slightly and enterprise architecture and information security architecture are added. Our 2026-outline questions on these topics are already included, so you can prepare for an exam on either side of the date. Content reviewed October 2026.
- 347
- Questions
- 4
- Domains
- 3
- Exam formats
- 70%
- Pass mark
One-time purchase
- 347 exam-style questions with explanations
- Timed exams in 3 available formats
- Role-specific interview scenarios with guided self-review
- Domain analytics & weakest-area drills
- 6 months' access from purchase, including any updates for a new exam outline in that time
Try it free before you buy
Reviewed by cyber security professionals with 25+ years of experience each.
Save more with a combo pack or All-Access
What you'll master
Skills this course tests
Build an information security strategy aligned to business objectives
Assess and treat information security risk within risk appetite
Develop, manage and measure an information security programme
Lead incident management, response and recovery
Built for ISACA candidates
- IT and IS auditors
- Information security managers
- Risk, compliance and assurance professionals
- Security leaders moving into management
Career combo packs
Save more — packs that include CISM
Bundle this course with related ones, or build your own pack of any 3+ courses.
ISACA Pro
CISA and CISM exam practice plus role-specific interview preparation.
- ISACA CISA®
- ISACA CISM®
2 courses · 639 practice questions
AI Governance
ISO/IEC 42001 auditor and implementer tracks, plus CISM exam and interview practice.
- ISO/IEC 42001:2023 Lead Auditor
- ISO/IEC 42001:2023 Lead Implementer
- ISACA CISM®
3 courses · 647 practice questions
Syllabus
Every domain the exam covers
Live from our question bank — the number of practice questions in each knowledge domain.
Information Security Program
115 questions
Incident Management
99 questions
Information Security Risk Management
69 questions
Information Security Governance
64 questions
Exam simulation
Practise in the real exam format
Timed papers scored on our servers. The pass mark is 70%.
Short format
40
questions
60 minutes
Standard format
60
questions
90 minutes
Full exam simulation
100
questions
150 minutes
Free samples
Try sample questions from this course
Pick an answer to see whether you're right — and why.
What should the CISO do FIRST?
Which governance change is MOST important?
How should the CISO restructure the policy framework?
FAQ
Before you buy
Start preparing for CISM
Try the free samples and the free 40-question test, then enrol when you're ready.