ISACA · Advanced
ISACA CISM study guide
Exam domains and weights, what to study first, and the jobs asking for ISACA CISM right now.
Exam domains and weights
How to study for ISACA CISM
- Start with Information Security Program. It is about 33% of the exam.
- Then Incident Management (30%).
- Then Information Security Risk Management (20%).
- Take a practice exam, find your weakest domain, and study that next. Repeat until you score comfortably above the pass mark.
Jobs that ask for ISACA CISM
Create a free account to see how well each one matches you.
Free ISACA CISM practice exams
Timed practice exams, a readiness score and a study plan that targets your weakest domains.
Create a free accountFrequently asked questions
What is on the ISACA CISM exam?
ISACA CISM covers 4 domains: Information Security Program (33%), Incident Management (30%), Information Security Risk Management (20%), Information Security Governance (17%).
Which ISACA CISM domain should I study first?
Information Security Program carries the most weight at about 33% of the exam, so it earns the most study time. Then work down the list by weight and spend extra time on any domain where your practice scores are low.
What level is ISACA CISM?
ISACA CISM is an advanced-level certification from ISACA.
Are there jobs that ask for ISACA CISM?
Yes. ReconHire currently lists postings that mention ISACA CISM, such as Tabletop Exercise (TTX) Specialist - Cybersecurity Focus at Resilience; (Senior) Information Security Officer (German) at Hawk; Senior IT & Cybersecurity Auditor at SwissPeak Partners GmbH.
Can I practice for ISACA CISM for free?
Yes. ReconHire has free ISACA CISM practice exams on every plan, with a readiness score and a study plan that targets your weakest domains.