CISM Certification Training
ISACA's management-side credential - governance, programme development, and incident management for people who run security functions rather than operate them.
Duration
37.5 hours / 5 days (Mon–Fri)
Tuition
$3,195
Delivery Method
Instructor-led bootcamp (in-person, hands-on labs). Private tutoring and evening class options available on request.
Location
San Diego, CA — on-site delivery also available worldwide at your unit or command
Course Overview
Certified Information Security Manager is ISACA's flagship management certification. Where CISSP spans both technical and managerial ground, CISM is unambiguously management-focused: it assumes you are accountable for a security programme and tests whether you can align it with business objectives.
The course covers the four CISM domains - information security governance, information risk management, information security programme development and management, and information security incident management.
CISM is an approved DoD 8140 baseline certification for Information Assurance Management levels and is commonly required for security manager and ISSM positions.
Who This Course Is For
- Information security managers
- ISSM and security programme managers
- IT risk and compliance managers
- Security consultants and advisors
- IT directors with security accountability
About the Exam
Exam format, question count, duration and scoring are set by the certifying body and are periodically revised. Confirm the current version before scheduling.
Exam Details
Exam code: Lorem ipsum dolor sit.
Duration: Lorem ipsum dolor sit.
Question format: Lorem ipsum dolor sit.
Passing score: Lorem ipsum dolor sit.
Domains Covered
- Domain 1 – Information Security Governance
- Domain 2 – Information Risk Management
- Domain 3 – Information Security Program
- Domain 4 – Incident Management
Course Outline
4 modules covering the full objective set.
Domain 1 – Information Security Governance
- Establish and maintain an information security governance framework
- Align information security strategy with business objectives
- Develop and manage security policies, standards, and procedures
- Ensure compliance with legal, regulatory, and contractual requirements
Domain 2 – Information Risk Management
- Identify and assess information security risks
- Implement risk management frameworks and methodologies
- Develop risk mitigation strategies and controls
- Monitor and report risk to stakeholders
Domain 3 – Information Security Program
- Develop and manage an enterprise information security program
- Implement security controls and technologies
- Manage security resources and budgets
- Measure program effectiveness using metrics and reporting
Domain 4 – Incident Management
- Develop and maintain incident response capabilities
- Detect, analyze, and respond to security incidents
- Conduct incident recovery and business continuity processes
- Perform post-incident analysis and improvements
- Experience Requirements
- You must have
- five (5) years
- of professional
- information security management
- work experience.
What Your Training Includes
- Instructor-led training covering the full objective set
- Official courseware
- Hands-on virtual lab environment
- Practice questions and exam review
- Structured exam preparation
- Post-class instructor support
Program Details
This bootcamp runs as an intensive 37.5-hour program over 5 days (Monday–Friday), combining instructor-led lecture, hands-on labs, and exam-focused review. Private tutoring and evening class formats are available on request — contact us for the next scheduled start date.
We are not able to accept Tuition Assistance (TA) or GI Bill at this time. Courses are funded through command funding, organizational funding through your employer, or your service's COOL (Credentialing Opportunities On-Line) program — contact us to confirm your eligibility.
DoD 8140 / 8570 Alignment
CISM is an approved baseline certification and maps to the following DoD cyber workforce categories and work roles.
Baseline Categories
- IAM Level II
- IAM Level III
Mapped Work Roles
- Manager (004)
- Senior Manager (005)
Upcoming Classes
Published dates for the next twelve months. Class weeks run Monday to Friday.
Advance Your Career With CISM
Talk to our team about class schedules, funding options, and which certification path fits your goals.