Cybersecurity Certifications

ISACA CISM — Certified Information Security Manager

Complete, exam-focused prep for ISACA's Certified Information Security Manager (CISM) — the management-level credential for leading an enterprise security program. Covers all four job-practice domains at blueprint weight: information security governance (aligning security with business strategy, roles and accountability, the policy/standard/procedure/guideline hierarchy, and frameworks like COBIT and ISO 27001); information security risk management (risk concepts, appetite vs tolerance, qualitative and quantitative assessment with SLE/ALE/ARO, the four treatment options, and KRIs); information security program development and management — the largest domain — spanning program development, security architecture, control selection (preventive/detective/corrective and administrative/technical/physical), awareness and metrics (KPIs/KRIs), third-party and supply-chain risk, secure SDLC, and data protection; and information security incident management (response planning and the CSIRT, detection/containment/eradication/recovery, evidence and chain of custody, business continuity and disaster recovery with RTO/RPO, and post-incident improvement). Written from the manager's perspective the exam demands, with exam-trap callouts, per-domain mastery checks, a 50-question mock, a full-length 125-question exam simulator, and a spaced-repetition flashcard deck. CISM is 150 questions in 4 hours; passing is a scaled 450 out of 800.

5domains / modules
27lessons
305practice questions
42flashcards

0.00 USD

Start this course →

What you'll study

Domain 1 — Information Security Governance (17%)

Domain 2 — Information Security Risk Management (20%)

Domain 3 — Information Security Program Development & Management (33%)

Domain 4 — Information Security Incident Management (30%)

Quick Reference — Exam-Day Cheat-Sheet

Practice and exam readiness

Related courses

Create a free account to preview lessons. Browse all courses.