Biggest Sale Of The Year | Get 35% Off With Our Black Friday Discount | Offer Ends Friday November 27th
ISACA Certified Information Security Manager® (CISM®)
One of Firebrand’s most in-demand courses, the Certified Information Security Manager Certification® course (CISM®) equips you to design, manage, and oversee enterprise-level security systems with confidence. You’ll gain the expertise to assess risks, implement governance, and align security with business objectives.
Save 35% On Selected Course Dates | Black Friday Sale | Enquire Now To Learn More
Exam
Exam fees included
Course code
cism
Course pricing varies based on delivery method and location.
Why choose Firebrand
150,000 +
professionals trained worldwide
25+
years of delivering accredited IT training
Top 20
IT training company globally
70%
of learners return for another course
What you’ll learn
Through Firebrand's unique Lecture | Lab | Review method, you'll go through the four ISACA CISM Domains and retain information faster.
You will learn all about:
Information Security Governance
Information Security Risk Management and Compliance
Information Security Program Development and Management
Information Security Incident Management
Curriculum
This in-depth certification course helps you become an expert across the four CISM Domains:
Prerequisites
There are no formal prerequisites to attend the CISM course and sit the exam. In fact, this is a practice accepted and encouraged by ISACA.
Achieving CISM
To become CISM certified, you must meet the following requirements:
Pass the CISM exam
Adhere to ISACA's Code of Professional Ethics
Agree to comply with the Continuing Education Policy
Accumulate enough work experience in the field of information security.
Submit an Application for CISM Certification within 5 years of passing the exam - see below
CISM prerequisites
The CISM certification is built for information security professionals, managers and other assurance providers. In order to be eligible, you must be able to submit verified evidence of a minimum of five years of information security work experience, with a minimum of three years of information security management work experience in three or more of the job practise analysis areas. The work experience must be gained within the 10-year period preceding the application date for certification or within 5 years from the date of originally passing the exam.
CISM experience requirements
If you have any of the below, you can get 1 to 2 years waivered and will only need to prove 3-4 years of experience.
You can get 2 years waivered if you have:
ISACA Certified Information Systems Auditor (CISA) in good standing
ISC2 Certified Information Systems Security Professional (CISSP) in good standing
Post-graduate degree in information security or a related field (e.g., business administration, information systems, information assurance)
You can get 1 year waivered if you have:
One full year of information systems management experience
One full year of general security management experience
Skill-based security certifications (e.g., SANS or GIAC, Microsoft Certified Solutions Expert (MCSE), CompTIA Security +, Disaster, Recovery Institute Certified Business Continuity Professional (CBCP), ESL IT Security Manager)
Completion of an information security management program at an institution aligned with the Model Curriculum
The experience substitutions will not satisfy any portion of the 3-year information security management work experience requirement.
Experience Exceptions
Two years as a full-time university instructor teaching the management of information security can be substituted for every 1 year of information security experience.
Exam info
You'll sit the official CISM exam at the Firebrand Training Centre, covered by your Certification Guarantee:
Duration: 4 hours
Number of questions: 150 multiple choice
Languages: English, Chinese Simplified, Japanese, Korean and Spanish
The exam tests knowledge in the following domains:
Domain 1 - Information Security Governance (17%)
Domain 2 - Information Security Risk Management (20%)
Domain 3 - Information Security Program Development and Management (33%)
Domain 4 - Information Security Incident Management (30%)
70% of our customers return to book more training. Here's why.
Interested in this course?
Speak to one of our learning advisors for information on upcoming course dates, pricing, delivery options and team training.
No obligation • Free consultation
Talk to a Firebrand expert
Get personalised guidance from our learning advisors and discover the best way to achieve your training goals.
- Course recommendations
- Flexible training options
- Team and private delivery available
FAQs
On this course, you'll get official ISACA Student Kits, which include:
Certification Review Manual
12-month access to official ISACA Resources, including ISACA Exam Practice Questions, Answers and Explanations
Course materials
CISM is one of the best-known and most respected Information Security Management certifications in the world.
Pursuing it is well worth the effort, because:
Unlike ISC2 CISSP or EC-Council CEH, which dive into more hands-on, technical aspects, CISM focuses on Management, making it ideal for professionals responsible for aligning security strategies with business objectives, managing teams, and overseeing security governance.
Also, CISM emphasizes the importance of aligning information security with business objectives. This is crucial as many organizations require security professionals who can speak both business and technical languages. With increasing cyber threats and regulatory requirements, there’s a high demand for such professionals and many businesses now require strategic security leaders who can not only implement technical solutions but also ensure that those solutions align with business goals.
Finally, last but not least, CISM is highly recognized and respected worldwide, particularly by employers seeking Senior Leadership in Cyber Security; CISM is an industry standard for positions like Information Security Manager, IT Security Consultant, Security Director, and Risk Manager.
So, if you’re looking to move into Cyber Security leadership and work at a strategic level, CISM is well worth your while.
Both ISACA CISM and the ISC2 Certified Information Systems Security Professional (CISSP) are vendor-neutral, advanced programmes in IT security for continuing professional education.
Despite many similarities, however, they are complementary instead of in direct competition to each other.
Here's what CISM and CISSP have in common:
Vendor-neutral
Require 5 years of experience in information security management
Maintenance requires completion of continuing education
Perhaps the main difference is that CISM is more holistic and management-focused, where CISSP has a more technical approach.
CISM and CISSP are designed for different audiences based on career goals, job roles, and areas of focus.
ISACA CISM is best suited for professionals in or aspiring to management roles in Information Security, where the focus is on Governance, Risk Management, and aligning security strategies with business goals. It’s ideal for those looking to advance into roles like Information Security Manager, IT Manager, or CISO.
Meanwhile, ISC2 CISSP is ideal for experienced security professionals, especially those in technical or strategic roles like Security Architect, Security Analyst, or CISO, who need a deep and broad understanding of security practices across various domains. It is particularly valuable for those with a technical background who wish to move into higher-level security roles.
Yes, we do provide courses suitable for beginners. However, Firebrand's immersive courses aren't easy and it's essential that you are interested and actively pursuing a career in IT.
Train your team
Since 2001 we’ve trained 135,000+ employees from thousands of large and small organisations, saving them more than one million hours in training time.