CISM transition: the updated exam takes effect on 3 November 2026. For exams before that date, domain weights are 17%, 20%, 33% and 30%. From 3 November 2026 they are 18%, 20%, 33% and 29%, with greater emphasis on strategy and programme development, including enterprise and information security architecture. Tell us your planned exam date so the preparation materials can be matched to it.
WHAT YOU WILL TAKE AWAY
Build capability.
Move forward.
- Align information security strategy with organisational goals.
- Evaluate risk responses and ownership at management level.
- Plan security programme resources, controls and performance measures.
- Coordinate incident readiness, response and improvement activities.
Who this is for
- Information security managers and aspiring security leaders
- Risk, governance and assurance professionals
- Experienced practitioners preparing for CISM
Programme coverage
Study areas for guided learning and exam preparation. ERG confirms the final session plan and material edition with your booking.
- Information security governance
- Information security risk management
- Information security programme
- Incident management
Before you join
Relevant information security and management experience is recommended. ISACA’s certification experience and application requirements are separate from exam preparation and must be checked before applying for the credential.
Your training package
- Instructor-led sessions and guided review as specified in the quotation
- Learning activities and knowledge checks appropriate to the selected programme
- Course completion certificate, subject to attendance requirements
- Official courseware, labs, practice tests, vouchers and retakes only where itemised in the quotation
Training completion does not itself award the vendor certification.
Choose how you learn
Questions, answered.
Which CISM outline should I study?
Use the outline applicable on your exam date. ISACA’s updated exam takes effect on 3 November 2026. For an exam on or after that date, request preparation aligned to the updated outline and materials.
When is the next class?
Request available dates using the enquiry button. Tell us your preferred dates, time zone, delivery mode and number of participants. A class is confirmed only when ERG confirms the schedule.
What does the training package include?
Your written quotation will itemise instructor-led sessions, courseware, labs, practice tests, access periods and any exam voucher or retake. Availability and inclusions vary by package.
Does the training fee include the certification exam?
Only when your quotation explicitly includes an exam voucher. Training completion is separate from passing an examination and meeting the certification body’s experience and application requirements.
Can our team request a private class?
Yes. Enquire about classroom, live virtual or in-house/corporate delivery and share your team size, learning objectives and preferred timetable.
Official exam references
Content reviewed 18 October 2026. Certification bodies may update their exams and policies. Use the official references when confirming your exam booking.