Built for management roles
CISM tests governance, risk, program development and incident management, the work of security managers rather than hands-on engineers.
CertOcean's CISM training for the USA is a live online course held from 9 AM to 5 PM Eastern (6 AM to 2 PM Pacific). CISM is ISACA's credential for security managers, approved for DoD 8140 IAM Levels II and III, and the course is backed by a pass-or-full-refund guarantee.
ISACA exam details and fees as published in 2026.
CISM tests governance, risk, program development and incident management, the work of security managers rather than hands-on engineers.
CISM is approved for IAM Levels II and III, the management levels in DoD cyber workforce roles.
Exam fee $575 for members or $760 for non-members, a $50 application fee after you pass, and an annual fee of $45 or $85.
Live classes with an instructor, 9:00 AM to 5:00 PM US Eastern. Here is what that means where you are.
Need a different time?
Ask for a private or custom schedule that fits your working day in the USA.
Ask for a scheduleFive years in information security management. Up to two years can be waived for certain degrees or certifications.
Live classes on Eastern time across the four CISM domains, with mock exams.
Pay the ISACA exam fee and book within 12 months, online or at a test center.
Submit your experience and the $50 application fee to ISACA.
Earn 120 CPE hours every three years, at least 20 each year.
Ready to plan your CISM exam?
An advisor checks your eligibility, suggests a batch and gives you the full cost, including the official exam fee.
Get my free exam plan Full syllabus and reviews Try a free CISM practice testISACA charges $575 for members and $760 for non-members. After you pass there is a $50 application fee and an annual maintenance fee of $45 for members or $85 for non-members.
Yes. CISM is approved for IAM Levels II and III.
The CISM exam has 150 multiple-choice questions and a four-hour limit. You need a scaled score of 450 on a 200 to 800 scale to pass.
Five years of information security management experience. Up to two years can be waived for certain degrees or certifications.
CISSP covers broad security knowledge and suits engineers moving into leadership. CISM focuses on managing a security program. Many US security managers hold both.
Tell us your goal. An advisor will help you pick the right exam, the right batch and the right time to book it.
Takes about 30 seconds. No payment or commitment.