ISACA CISM
ISACA logo

ISACA CISM

CISM

CISM is a prestigious certification for information security managers, focusing on governance, risk management, program development, and incident response to protect enterprise information assets.

Exam syllabus, organized by domain

Try a real question

Sample ISACA CISM exam question

Answer this question the same way you would on exam day. No sign-up needed — one random question, three tries to swap it out.

MasterInformation Security Governance

A healthcare organization is negotiating a cloud services agreement and is also preparing for a newly enacted data privacy regulation. During a governance workshop, several statements are made about compliance obligations. Which statements are accurate according to CISM principles? (Select all that apply.)

Frequently asked questions

Key facts about the ISACA CISM certification and how to prepare for it.

Skills & Requirements

What you need to know before attempting the ISACA CISM exam.