CISM Certification

CISM exam eligibility is required to schedule and take an exam. Eligibility is established at the time of CISM exam registration and is good for twelve months. When you enroll with Infosec Academy, we provide step by step support for this process.

• Exam Format: Multiple-choice
• Number of Questions: 150
• Duration: 4 hours
• Passing Score: 450 out of 800 (scaled score)
• Domains Covered:
  1. Information Security Governance (17%)
  2. Information Risk Management (20%)
  3. Information Security Program Development and Management (33%)
  4. Information Security Incident Management (30%)
• Exam Location: Available at ISACA testing centers and online remote proctoring.
• Languages: Offered in multiple languages, including English, Spanish, French, and more.
• Exam Cost: $760 for non-members, $575 for ISACA members.

Taking and passing the CISM certification exam is just the first step in becoming certified. To become CISM certified, an individual must first meet the following requirements:

• Pass the certification exam
• Pay the US$50 application processing fee
• Submit application to demonstrate experience requirements
• Adhere to the Code of Professional Ethics
• Adhere to the Continuing Professional Education Policy

Candidates have 5 years from passing the exam to apply for CISM certification.

To maintain your CISM certification, you must fulfill the following Continuing Professional Education (CPE) requirements:

Earn 120 CPE Hours Every 3 Years

You must earn at least 120 CPE hours over a 3-year period, with at least 20 CPE hours required annually.

CPE Activity Types

CPE activities include attending conferences, workshops, seminars, self-study, online courses, or presenting at industry events. Activities should be directly related to information security management, risk management, or other CISM domains.

Documentation

You must maintain records of your CPE activities, including certificates of completion, registration confirmations, and a summary of learning outcomes.

Annual Maintenance Fee

An annual maintenance fee is required to keep your certification active. ISACA members receive a discounted fee compared to non-members.

Code of Professional Ethics

You must adhere to ISACA’s Code of Professional Ethics, promoting integrity, competence, and ethical behavior in your professional activities.

Failure to meet these requirements may result in the suspension or revocation of your CISM certification.