Last Updated: Oct 12, 2026
No. of Questions: 1193 Questions & Answers with Testing Engine
Download Limit: Unlimited
Our APP Test Engine & Soft Test Software of ActualTorrent CISM actual exam materials can simulate the real test scenes so that you will have a good control of finishing speed and time. Much practice make you half the work with double the results about real ISACA CISM exam. The package version including three versions will not only provide you high-pass-rate CISM study materials but also different studying methods.
ActualTorrent has an unprecedented 99.6% first time pass rate among our customers.
We're so confident of our products that we provide no hassle product exchange.
Free demo, safe international payment, instant delivery, a year of free updates, and 24/7 aftersales agents who keep your privacy absolutely: ActualTorrent is the considerate choice for 2026 CISM candidates preparing for ISACA Certified Information Security Manager.
| Certification Vendor: | ISACA |
|---|---|
| Exam Name: | Certified Information Security Manager (CISM) Exam |
| Exam Number: | CISM |
| Exam Price: | USD 575 (ISACA member), USD 760 (non-member) |
| Related Certifications: | CGEIT CISA CRISC CDPSE |
| Exam Duration: | 240 minutes |
| Exam Format: | Multiple choice, Computer-based, Linear format |
| Certificate Validity Period: | 3 years |
| Available Languages: | Japanese, Spanish, Korean, Chinese (Simplified), English |
| Real Exam Qty: | 150 |
| Passing Score: | 450 (scaled score 200–800) |
| Recommended Training: | CISM Online Review Course CISM Review Manual |
| Exam Registration: | ISACA Official Registration |
| Sample Questions: | DOWNLOAD DEMO |
| Exam Way: | Computer-based testing at PSI authorized centers or remotely proctored online |
| Pre Condition: | No mandatory exam prerequisites; certification requires 5+ years of professional information security management experience, with at least 3 years across 3+ domains, within 10 years before application or 5 years after passing exam |
| Official Syllabus URL: | https://www.isaca.org/credentialing/cism/cism-exam-content-outline |
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Information Security Governance | 17% | - Establish and maintain governance framework - Define security roles, responsibilities and organizational structure - Monitor compliance and regulatory requirements - Develop and maintain policies, standards and procedures - Align security strategy with business objectives |
| Topic 2: Information Security Risk Management | 20% | - Risk identification and assessment - Threat and vulnerability analysis - Risk response and treatment strategies - Risk monitoring, reporting and communication - Third-party and supply chain risk management |
| Topic 3: Incident Management | 30% | - Post-incident review and improvement - Detection, analysis and classification of incidents - Stakeholder communication and reporting - Business continuity and disaster recovery coordination - Containment, eradication and recovery - Incident response planning and preparation |
| Topic 4: Information Security Program | 33% | - Program development and alignment with strategy - Security awareness, training and education - Security architecture and control design - Control implementation, testing and evaluation - Program performance measurement and reporting - Resource management, budget and staffing |
ISACA Certified Information Security Manager is an official ISACA exam, registered under the code CISM. Passing it earns the Certified Information Security Manager certification at the Professional level. It also connects to CISA, CRISC, CGEIT, CDPSE. In a fast-developed industry, this certificate is a promise to your career and your next promotion.
No mandatory exam prerequisites; certification requires 5+ years of professional information security management experience, with at least 3 years across 3+ domains, within 10 years before application or 5 years after passing exam
Vendor policies do evolve, so confirm the current conditions before you register on the official exam page.
The ISACA Certified Information Security Manager exam contains 150 questions within 240 minutes. Former customers share a consistent secret: two or three regular hours of daily practice beat sporadic cramming. The ActualTorrent engine covers every important test point, so a steady routine builds both knowledge and the pacing the clock demands.
Passing ISACA Certified Information Security Manager requires 450 (scaled score 200–800), and the official fee is USD 575 (ISACA member), USD 760 (non-member). Retakes bill the full USD 575 (ISACA member), USD 760 (non-member) again, so treat readiness as something to verify, not assume: when your ActualTorrent practice scores clear the requirement day after day, you are ready to book.
Registration for ISACA Certified Information Security Manager runs through the official channels below.
One scheduling detail: the exam is delivered Computer-based testing at PSI authorized centers or remotely proctored online.
Yes, ISACA recommends the following training for ISACA Certified Information Security Manager candidates.
Whichever training you follow, practice daily with the 1193 questions in the ActualTorrent CISM package; regular hours with real exam-style items are what turn preparation into a pass.
ISACA Certified Information Security Manager is divided into 4 official domains, led by Information Security Program (33%), Incident Management (30%), and Information Security Risk Management (20%). The full outline is above; while details shift over time, the main test points stay steady, and we have already sorted them for you.
Yes and yes. If you are a little suspicious, download the free demo of the ISACA Certified Information Security Manager questions and check the material before deciding. After purchase, updates are free for 365 days, with new versions sent to you as soon as test points change; after expiry, extending the update service costs 50% of the regular price.
We promise it in writing: a 100% money-back guarantee under defined conditions. Take the ISACA Certified Information Security Manager exam within 60 days of purchase; if you fail, claim a full refund according to your transcript by submitting a scanned enrollment slip and the official Score Report PDF within 2 days of the exam, processed within 7 days. The exam must match your product, candidate and payer names must match, and attempts within 3 days of purchase, unused downloads, free materials, and expired orders are excluded. Alternatively, switch freely to other exam material: two equivalent products, free, with updates retained on your original purchase.
Delivery is instant: files unlock for download at payment and are emailed within one minute, so there is no wasted time between ordering and studying. If nothing arrives within 2 hours, check spam and contact our 24/7 aftersales agents. Installation is unlimited.
Which of the following is ESSENTIAL to ensuring effective incident response?
Correct Answer: C 🗳️
Explanation: Only visible for ActualTorrent members. You can sign-up / login (it's free).
Senior management has expressed concern that the organization ' s intrusion prevention system (IPS) may repeatedly disrupt business operations Which of the following BEST indicates that the information security manager has tuned the system to address this concern?
Correct Answer: A 🗳️
Explanation: Only visible for ActualTorrent members. You can sign-up / login (it's free).
An information security manager has identified that privileged employee access requests to production servers are approved; but user actions are not logged. Which of the following should be the GREATEST concern with this situation?
Correct Answer: A 🗳️
Explanation: Only visible for ActualTorrent members. You can sign-up / login (it's free).
During the due diligence phase of an acquisition, the MOST important course of action for an information security manager is to:
Correct Answer: D 🗳️
Explanation: Only visible for ActualTorrent members. You can sign-up / login (it's free).
Which of the following should be triggered FIRST when unknown malware has infected an organization ' s critical system?
Correct Answer: D 🗳️
Explanation: Only visible for ActualTorrent members. You can sign-up / login (it's free).
Viewing page 1 out of 239 pages.
Viewing questions 1-5 out of 1193 questions.
Virgil
Ann
Cora
Eve
Jean
Madeline
ActualTorrent is the world's largest certification preparation company with 99.6% Pass Rate History from 60083+ Satisfied Customers in 148 Countries.
Over 60083+ Satisfied Customers
