VIS LLC is an ISACA Accredited Training Organization, and its CISM course prepares security managers, ISSMs, CISOs and vCISOs for ISACA's Certified Information Security Manager exam. You learn live online in evening sessions, with the official ISACA Training Kit, all four exam domains and two full practice exams.
Who CISM is for
CISM proves you can run security as a management discipline: set governance, decide on risk, build and measure the program, and lead the response when an incident lands. It fits:
- Security managers and team leads moving up from technical roles
- Information Systems Security Managers (DCWF work role 722)
- CISOs, deputy CISOs and vCISOs
- IT and risk leaders who own the security budget and report to the board
The four CISM exam domains
Sessions follow ISACA's current CISM exam content outline, and study time follows the domain weights.
| Domain | What you learn | Exam weight |
|---|---|---|
| 1. Information Security Governance | Governance frameworks, strategy, policy, roles and the link to enterprise governance. | 17% |
| 2. Information Security Risk Management | Risk assessment, appetite and tolerance, treatment options and risk monitoring. | 20% |
| 3. Information Security Program | Building and running the program: controls, metrics, resources, awareness and third parties. | 33% |
| 4. Incident Management | Response planning, detection, containment, recovery, business continuity and lessons learned. | 30% |
The CISM exam has 150 multiple-choice questions in four hours, scored from 200 to 800 with 450 to pass. After you pass, ISACA also requires information security management experience before it awards the certification; see ISACA's CISM page.
How the course runs
- Prep startsFoundational material as soon as you register.
- Live sessions5:00–7:30 PM Eastern, every session recorded.
- Practice examsTwo full-length exams to find your weak domains.
- Book the examOnce you score 75% or more on the final practice exam.
The instructor for each CISM cohort is named on the schedule when the dates are announced.
CISM and DoD 8140
CISM is a DoD 8140 foundational qualification option for work role 722, Information Systems Security Manager, at the Intermediate and Advanced levels, and is listed at the Advanced level for several more roles, including 612 Security Control Assessor. See the work-role table.
CISM cohort facts
- Next cohort
- Dates announced soon · schedule
- Sessions
- 5:00–7:30 PM Eastern
- Format
- Live online, evening sessions, every session recorded
- Training
- $1,199
- With voucher
- $1,749 (includes the ISACA exam voucher)
- Included
- Official ISACA Training Kit, recordings, two practice exams, CPE certificate for hours attended
- Provider
- ISACA Accredited Training Organization
- If you fail
- Pass Assurance pays one retake fee (conditions apply)
Questions first? Book a 15-minute call or call (732) 200-7351.
CISM Training Questions
Is this CISM course from an ISACA Accredited Training Organization?
Yes. VIS LLC is an ISACA Accredited Training Organization, and the CISM course is built on ISACA's official training materials. Every seat includes the official ISACA Training Kit.
How much does the CISM course cost?
Training costs $1,199, or $1,749 with the ISACA exam voucher included. If you buy the exam yourself, ISACA currently charges US$575 for members and US$760 for non-members.
Is CISM approved for DoD 8140?
Yes. CISM is a DoD 8140 foundational qualification option for work role 722, Information Systems Security Manager, at the Intermediate and Advanced levels, and for several other roles at the Advanced level.
Should I take CISM or CISA first?
Take CISM first if you manage a security program, a team or incident response. Take CISA first if your job is auditing or assessing controls and evidence.
What if I don't pass the CISM exam?
With Pass Assurance, VIS pays the ISACA registration fee for one retake if you attended or watched the sessions, completed the assignments and practice exams, scored at least 75% on the final practice exam and sat the exam within 90 days.