leadership
professional Level
professional certification
Certified Information Security Manager
CISM · Issued by ISACA
Official Exam Fee
$760 USD (exam-only)
Region: US · exam-only
Official Exam Code
CISM
Format: Multiple choice
Validity & Renewal
3 years (annual reporting required)
120 CPE hours per 3-year cycle (minimum 20 CPE hours per year)
Prerequisites & Recommended Experience
Mandatory Prerequisites
5 years of verified professional work experience in information security management, with at least 3 years in 3 or more CISM domains (up to 2 years waivers available).
Recommended Experience
None specified. Foundational knowledge recommended.
Exam Specifications
- Duration
- 240 minutes
- Questions
- 150 multiple choice questions
- Passing Criteria
- 450 (scaled score from 200 to 800)
- Testing Delivery
- PSI / Prometric testing centers or remote proctored online
Data verified on 2026-10-18 against primary issuer documentation.
Prices subject to change by issuing body. Taxes may apply.