CISM (Certified Information Security Manager) Requirements & Prerequisites
Everything you need to know before registering for the CISM (Certified Information Security Manager), eligibility, cost, format, and what to expect on exam day.
Cost
$575-$760
Provider
ISACA
Validity
3 years
Available
Global
Education
Check official exam requirements
Experience
1-3 years of hands-on experience recommended
Specific Requirements
- There is no prerequisite to sit the exam. ISACA states the CISM exam is open to anyone with an interest in information security, and you may take it before meeting the experience requirement.
- For certification, a minimum of five years of professional information security management work experience within the CISM job practice areas is required.
- That work experience must have been gained within the 10-year period preceding the date of your certification application.
- Experience waivers are available for the CISM to a maximum of two years, so at least three years of qualifying experience cannot be waived.
- Certification also requires paying the US$50 application processing fee and submitting the certification application.
- You must agree to adhere to ISACA's Code of Professional Ethics and to the Continuing Professional Education policy.
- You have five years from your exam passing date to apply for certification; after that the passing result no longer supports an application.
- Exam registration and full payment are required before you can schedule, and you can book a testing appointment as early as 48 hours after payment clears.
Number of Questions
150 questions
Duration
4 hours (240 minutes)
Question Format
Multiple choice, four options per question, one best answer, Scenario-based items that ask what a security manager should do first, next, or best
Passing Requirement
450 on a scaled range of 200 to 800
How It Is Delivered
Computer-based at authorized PSI testing centers globally, or remotely proctored through PSI
Languages Offered
English, Spanish, Simplified Chinese, Japanese, French, German
Visit the official ISACA certification page
Create an account and select your exam
Choose a test center or online proctoring option
Pay the exam fee and schedule your date
- Two forms of valid ID (one government-issued with photo)
- Appointment confirmation email
- For online proctoring: webcam, microphone, clean desk, stable internet
What are the prerequisites for the CISM (Certified Information Security Manager)?
There is no prerequisite to sit the exam. ISACA states the CISM exam is open to anyone with an interest in information security, and you may take it before meeting the experience requirement.. For certification, a minimum of five years of professional information security management work experience within the CISM job practice areas is required.. That work experience must have been gained within the 10-year period preceding the date of your certification application.. Experience waivers are available for the CISM to a maximum of two years, so at least three years of qualifying experience cannot be waived.. Certification also requires paying the US$50 application processing fee and submitting the certification application.. You must agree to adhere to ISACA's Code of Professional Ethics and to the Continuing Professional Education policy.. You have five years from your exam passing date to apply for certification; after that the passing result no longer supports an application.. Exam registration and full payment are required before you can schedule, and you can book a testing appointment as early as 48 hours after payment clears..
How much does the CISM (Certified Information Security Manager) cost?
The CISM (Certified Information Security Manager) exam costs $575-$760. This includes the exam fee only, study materials are additional.
How do I register for the CISM (Certified Information Security Manager)?
Visit the official ISACA certification page → Create an account and select your exam → Choose a test center or online proctoring option → Pay the exam fee and schedule your date
What should I bring to the CISM (Certified Information Security Manager)?
Two forms of valid ID (one government-issued with photo). Appointment confirmation email. For online proctoring: webcam, microphone, clean desk, stable internet.
Ready to prepare for CISM (Certified Information Security Manager)?
Get the complete exam guide with study plan, tips, and practice questions.
View CISM (Certified Information Security Manager) Guide