CISM® Certification TrainingCyber Security Certification Training
Move from security practitioner to security manager. Governance, risk, programme and incident management — aligned to ISACA's exam content effective 3 November 2026.
This Course Includes:
Live online instruction
Updated exam-content alignment
Management-level scenarios
Practice questions and review
Accredited Trainers
Accredited Curriculum
Confirmed Batches
Passing Assurance
Course Highlights
- Built for the exam content ISACA introduced on 3 November 2026, not the 2022 outline
- Weighted toward where the exam is weighted: programme (33%) and incident management (29%)
- Teaches management decisions — budget, priorities, risk acceptance — not tool configuration
- Separates ISACA's experience and endorsement rules from course attendance
Career Outcomes
- Preparation for security manager, security programme lead and head-of-security roles
- A governance-and-risk vocabulary for talking to boards, auditors and business owners
- A route from technical security work into management responsibility
- Alignment with ISACA's certification path alongside CISA and CRISC
What you will learn
About this course
CISM® is ISACA's credential for people who manage, design and oversee enterprise information security. Where CISSP is broad and technical, and CISA is audit-led, CISM centres on management: strategy, risk, programme and incident leadership.
ISACA updated the CISM exam content, effective 3 November 2026. The four domains remain, with revised emphasis including information security strategy and programme development and new coverage of enterprise architecture and information security architecture. This course is built for that updated content.
Training prepares you for the exam. ISACA controls eligibility, work-experience requirements, the exam and the credential, and CertScope does not award CISM®.
Exam at a glance
- Exam: 150 questions across four domains
- Current exam content: Updated exam available from 3 November 2026; four domains retained with new emphasis on strategy, programme development, enterprise architecture and information security architecture
- Exam registration fee (reference only): US$575 ISACA member / US$760 non-member
- Application processing fee: US$50 after passing — reconfirm in the current candidate guide
- Annual maintenance fee: US$45 member / US$85 non-member — reconfirm in the current candidate guide
ISACA facts. Exam, application and maintenance charges are ISACA's, separate from CertScope tuition. Always confirm current details with ISACA before you book.
Learning Path
- 1
Check ISACA's requirements
Review exam registration, work-experience and application rules before you plan timelines.
- 2
Complete structured training
Work through the four domains using management scenarios.
- 3
Practise and review
Use scenario questions to expose gaps in judgement, then revisit the relevant domain.
- 4
Register and sit the exam with ISACA
Book through ISACA; confirm your fee and registration window.
- 5
Apply for certification
Submit your experience for validation and plan ongoing maintenance.
The CertScope Advantage
Current content
Aligned to the post-3-November-2026 exam content.
Management lens
Decisions, trade-offs and communication rather than tool detail.
Honest about costs
ISACA charges are listed as ISACA's, not folded into tuition.
Is CISM® right for you?
This course is for you if…
- Security managers and team leads
- Aspiring heads of security and CISOs
- Risk, compliance and IT governance professionals moving into security leadership
- Consultants advising on security programmes
You may want to reconsider if…
- People seeking a purely hands-on technical lab course
- Candidates with no security or related experience who expect immediate certification — ISACA experience rules apply
Course curriculum
Information Security Governance
Connecting security to enterprise purpose: strategy, structure, obligations and the business case. Exam domain weight: 18%.
6 lessons
Information Security Governance
Connecting security to enterprise purpose: strategy, structure, obligations and the business case. Exam domain weight: 18%.
6 lessons
- Enterprise governance, culture and organisational structure
- Legal, regulatory and contractual requirements
- Roles and responsibilities
- Developing an information security strategy
- Enterprise architecture context
- Budgets, resources and business case
Information Security Risk Management
Identifying, analysing and treating risk, then keeping ownership and reporting clear. Exam domain weight: 20%.
6 lessons
Information Security Risk Management
Identifying, analysing and treating risk, then keeping ownership and reporting clear. Exam domain weight: 20%.
6 lessons
- Emerging risk and threat landscape
- Vulnerability and control-deficiency analysis
- Risk assessment and analysis methods
- Risk treatment and response options
- Risk and control ownership
- Monitoring and reporting risk
Information Security Program
Building and running the programme: architecture, controls, awareness, third parties and measurement. Exam domain weight: 33%.
7 lessons
Information Security Program
Building and running the programme: architecture, controls, awareness, third parties and measurement. Exam domain weight: 33%.
7 lessons
- Security architecture and programme resources
- Standards, frameworks, policies and procedures
- Asset identification and classification
- Control design, selection, testing and evaluation
- Security awareness and training
- Third-party service management
- Metrics, communication and reporting
Incident Management
Readiness and response: planning, impact analysis, continuity and recovery, and learning from events. Exam domain weight: 29%.
6 lessons
Incident Management
Readiness and response: planning, impact analysis, continuity and recovery, and learning from events. Exam domain weight: 29%.
6 lessons
- Incident response plan and readiness
- Business impact analysis
- Business continuity and disaster recovery planning
- Classification and readiness testing
- Investigation, containment, eradication and recovery
- Post-incident review and lessons learned
Exam Strategy and Scenario Practice
Reading management-style questions, choosing the best answer rather than a correct one, and closing gaps.
4 lessons
Exam Strategy and Scenario Practice
Reading management-style questions, choosing the best answer rather than a correct one, and closing gaps.
4 lessons
- Question technique for 'best' and 'first' answers
- Timed scenario practice
- Weak-area review
- ISACA registration and application steps
Schedules
Weekday Batches
Morning & evening slots to fit around work
Weekend Batches
Intensive Saturday & Sunday programmes
New batches are opening shortly. Leave your details below and our team will reach out with schedule options and registration guidance as soon as they are confirmed.
Request more information
Talk to our course advisors and get personalized guidance on curriculum, pricing, and batch schedules.
- Personalized course guidance
- Flexible payment options
- Group & corporate discounts
- Download course brochure
Prerequisites
- ISACA experience requirements apply to certification, not to attending training — confirm current rules with ISACA