Study Certified Information Security Manager
CISMEverything you need to prepare: flashcards to build vocabulary, learning tests to study topic by topic, timed exams that simulate the real thing, and a browsable question bank with explanations and references. About this certification →
Unlock all of Certified Information Security Manager
One certification plan opens every flashcard set, test, timed exam, and question bank here.
Flashcards
Term & definition · self-checkNew to this certification? Take a flashcards tour first to estimate your knowledge level and see where to focus before the practice learning tests.
Practice learning tests
Shorter, untimed quizzes to study and reinforce individual topics, with an explanation after every question.
Practice Test 1 — Information Security GovernanceFree demo
Domain 1: governance objectives, security strategy and gap analysis, policy hierarchy, reporting lines, the business case for security, ownership, and governance metrics.
Practice Test 2 — Information Security Risk Management🔒 Premium
Domain 2: risk components, ALE calculation, prioritization against appetite, valid acceptance, the limits of transfer, BIA, and third-party risk.
Practice Test 3 — Security Program Development🔒 Premium
Domain 3 (part 1): programme objectives, security architecture, control types, compensating controls, security in the SDLC, classification, access, and metrics.
Practice Test 4 — Security Program Management🔒 Premium
Domain 3 (part 2): SLAs and outsourcing, control testing evidence, vulnerability prioritization, change management, awareness effectiveness, and programme maturity.
Practice Test 5 — Incident Management🔒 Premium
Domain 4: preparation, event vs incident, containment sequencing, severity classification, evidence handling, exercises, post-incident review, and recovery objectives.
Study by exam domain
2024.1 · 150 questionsThe 4 domains of Certified Information Security Manager. This vendor does not publish a weighting, so the split below is even — treat it as a checklist rather than a forecast.
No published weighting for this exam — domains shown evenly. Or browse the whole question bank →
Practice exams
Timed · exam simulationFull-length, timed exams that mimic the real certification — the correct number of questions and time limit, with sourced references for every answer.
Practice Exam A — Timed Simulation🔒 Premium
Full-length timed simulation modeled on the real CISM exam (240 minutes). 150 exam-style questions across all four domains, with references.
Practice Exam B — Timed Simulation🔒 Premium
Full-length timed simulation modeled on the real CISM exam (240 minutes). 150 exam-style questions across all four domains, with references.
Mock exams
Randomized · you choose the level6 timed exams built on demand, with questions drawn at random from every practice exam and question bank in Certified Information Security Manager at the difficulty mix you pick. Every run counts towards your readiness score and shows which domains to work on next.
Exam question bank
Browse · by topicStudy real exam-style questions grouped by official exam topics — reveal the correct answer, explanation, and sourced references for each one.