ISACA certification2022 exam outline

ISACA CISM® Exam Practice

Certified Information Security Manager

Practice for the ISACA CISM® exam

Prepare for the ISACA CISM exam across all four domains — security governance, risk management, the security programme and incident management.

ISACA's new CISM exam outline takes effect on 3 November 2026: the four domains stay, the weights shift slightly and enterprise architecture and information security architecture are added. Our 2026-outline questions on these topics are already included, so you can prepare for an exam on either side of the date. Content reviewed October 2026.

347
Questions
4
Domains
3
Exam formats
70%
Pass mark

One-time purchase

₹499Regular price ₹1,39964% off
  • 347 exam-style questions with explanations
  • Timed exams in 3 available formats
  • Role-specific interview scenarios with guided self-review
  • Domain analytics & weakest-area drills
  • 6 months' access from purchase, including any updates for a new exam outline in that time
Enrol now · ₹499 Free 40-question test

Try it free before you buy

Reviewed by cyber security professionals with 25+ years of experience each.

Save more with a combo pack or All-Access

What you'll master

Skills this course tests

Build an information security strategy aligned to business objectives

Assess and treat information security risk within risk appetite

Develop, manage and measure an information security programme

Lead incident management, response and recovery

Built for ISACA candidates

  • IT and IS auditors
  • Information security managers
  • Risk, compliance and assurance professionals
  • Security leaders moving into management

Syllabus

Every domain the exam covers

Live from our question bank — the number of practice questions in each knowledge domain.

01

Information Security Program

115 questions

02

Incident Management

99 questions

03

Information Security Risk Management

69 questions

04

Information Security Governance

64 questions

Exam simulation

Practise in the real exam format

Timed papers scored on our servers. The pass mark is 70%.

Short format

40

questions

60 minutes

Standard format

60

questions

90 minutes

Full exam simulation

100

questions

150 minutes

Free samples

Try sample questions from this course

Pick an answer to see whether you're right — and why.

Sample 1Information Security GovernanceCISM Domain 1 — aligning security strategy with business objectives

What should the CISO do FIRST?

Sample 2Information Security GovernanceCISM Domain 1 — roles and responsibilities; governance structure

Which governance change is MOST important?

Sample 3Information Security GovernanceCISM Domain 1 — security policy framework

How should the CISO restructure the policy framework?

FAQ

Before you buy

Yes. Try 10 real exam-style questions with full explanations — no account needed. Every course page also has free sample questions.

Because courses unlock instantly, purchases are generally final — so try the free quiz and the free 40-question test first. We do refund duplicate payments and access problems we can't fix, and if you buy the wrong course by mistake we'll swap or refund it within 7 days, as long as you've used less than 10% of it. Report it from Purchases in your profile.

Combo packs are curated bundles for a career path (for example ISO Lead Auditor or ISACA Pro) at our biggest discounts. A custom pack lets you choose any 3 or more courses yourself at a reduced per-course price.

A single course gives you 6 months' access from the day you pay; combo packs, custom packs and All-Access give 12 months. That covers the question bank, timed exams, analytics, interview practice and study materials, including any updates in that time. Your access end date is shown on your dashboard and in Profile → Purchases. Buying a course again extends it. Purchases made before 25 October 2026 keep lifetime access.

Yes. Team plans include an admin console to assign courses, track progress and export results. Tell us your team size and we'll send a quote.

No. Exavora is an independent educational platform for exam preparation, interview preparation and practical knowledge-building. It is not affiliated with, endorsed by, sponsored by or authorized by ISO, IEC, ISACA or any certification body. Exavora does not administer official examinations, issue certificates or certifications, or guarantee exam, certification or employment outcomes. Third-party names and marks belong to their respective owners and are used only to identify related subject areas.

Review your score, domain breakdown and answer explanations, then use the results to plan your next practice session. Exavora provides exam practice and does not issue certificates or professional certifications.

Start preparing for CISM

Try the free samples and the free 40-question test, then enrol when you're ready.