The benefits
Everything you need to earn your CISM
- Exam Pass Guarantee
- 100% Satisfaction Guarantee
- CISM exam voucher
- Unlimited CISM practice exam attempts
- 12-month subscription to the ISACA Official Question, Answer & Explanation (QAE) Database
- Digital copy of ISACA Official Review Manual
- Five days live, expert CISM instruction
- Immediate access to Infosec Skills — including a bonus CISM boot camp prep course — from the minute you enroll to 90 days after your boot camp
- Learn by doing with 100s of additional hands-on courses and labs
- 90-day access to all boot camp video replays and materials
- Knowledge Transfer Guarantee
ISACA Accredited Training Organization (ATO)
Infosec is one of a select number of ISACA accredited Elite+ Partners in the world. When you enroll in an Infosec CISM Boot Camp, you can rest assured you are receiving the most effective and up-to-date certification prep available, including official ISACA training materials and instruction that has been independently assessed to meet ISACA’s quality standards.
Overview
Training overview
This CISM Boot Camp is designed for experienced information security managers and other professionals who manage, design, oversee or assess an enterprise’s information security.
- Information security managers
- Chief information security officers (CISO)
- Chief information officers (CIO)
- Information security consultants
- Anyone interested in learning information security management skills and getting certified
CISM training objectives
The training prepares you for the CISM examination by testing your knowledge and your ability to apply it to real-world scenarios. The CISM certification promotes international practices and validates your knowledge and experience around effective security management and consulting. The four CISM domains include:
Security governance
To effectively address the challenges of protecting an organization’s assets, senior management must define the desired outcomes of the information security program.
Risk management
Asset classification and valuation is an essential part of an effective risk management program — the greater the value, the greater the impact, the greater the risk.
Information security program development and management
The purpose of this area is to implement management’s governance strategy — the “due diligence” and “due care” of protecting the corporation’s assets.
Information security incident management
This area focuses on effectively managing unexpected (and expected) events, which may or may not be disruptive, and can be summed up in five words: identify, protect, detect, respond and recover.
Prerequisites
To become a CISM, you must submit verified evidence of a minimum of five years of information security work experience, with a minimum of three years of information security management work experience in three or more of the job practice analysis areas. The work experience must be gained within the ten-year period preceding the application date for certification or within five years from the date of originally passing the exam.
Associated NICE Work Roles
All Infosec training maps directly to the NICE Workforce Framework for Cybersecurity to guide you from beginner to expert across 52 Work Roles.
- Security Architect
- System Administrator
- Systems Security Analyst
Syllabus
-
-
You’ll get immediate access to all the content in Infosec Skills, including an in-depth CISM prep course, the moment you enroll. Prepare for your live boot camp, uncover your knowledge gaps and maximize your training experience.
-
-
-
To effectively address the challenges of protecting an organization’s assets, senior management must define the desired outcomes of the information security program.
-
-
-
To effectively address the challenges of protecting an organization’s assets, senior management must define the desired outcomes of the information security program.
-
-
-
To effectively address the challenges of protecting an organization’s assets, senior management must define the desired outcomes of the information security program.
-
-
-
To effectively address the challenges of protecting an organization’s assets, senior management must define the desired outcomes of the information security program.
-
-
-
Your Infosec Skills access extends 90 days past your boot camp, so you can take additional time to prepare for your CISM exam, get a head start on your next certification goal or start earning CPEs.
-
The schedule
CISM training schedule
Infosec’s CISM courseware materials are always up to date and synchronized with the latest ISACA exam objectives. Our industry-leading curriculum and expert instructors have led to the highest pass rates in the industry. More than 93% of Infosec students pass their certification exams on their first attempt.
Exam Pass Guarantee
Exam Pass Guarantee
If you don’t pass your exam on the first attempt, get a second attempt for free. Includes the ability to re-sit the course for free for up to one year (does not apply to CMMC-AB boot camps).
100% Satisfaction Guarantee
If you’re not 100% satisfied with your training at the end of the first day, you may withdraw and enroll in a different online or in-person course.
Knowledge Transfer Guarantee
If an employee leaves within three months of obtaining certification, Infosec will train a different employee at the same organization tuition-free for up to one year.
Cyber Work Podcast
Join us in the fight against cybercrime with weekly conversations about cybersecurity skills, jobs and industry trends.
Frequently asked questions
-
Why is getting certified an important part of a career as an information security manager?
-
Earning a high-level certification like the CISM demonstrates a working knowledge not just of the security systems practitioner’s use, but the management of security professionals as well. Hard data also shows that Certified Information Security Managers earn a higher salary than their non-certified counterparts.
-
-
What's the job outlook for CISM professionals?
-
CISM holders are highly sought-after in the information security industry, and are more likely to land senior roles that require greater responsibility. Common job titles include: Information System Security Officer, Information Security Manager, Information/Privacy Risk Consultant, and many others. Click here for more information about the job outlook for CISM professionals.
-
-
What is the average CISM salary?
-
While salary depends on a number of factors — including job title, location, and relevant work experience — CISM holder salaries range from $52,402 to $243,610. Entry-level positions trend towards the lower end of the spectrum while senior level candidates can expect significantly higher salaries. Click here for more detailed CISM salary information.
-
-
What does this CISM training course provide that other offerings do not?
-
Infosec’s CISM boot camp has the highest pass rate in the industry — 93%! Our award-winning training utilizes a five-day model of rigorous coursework with a knowledgeable instructor so that you can rest assured you’re receiving the best training in the industry. And with our Exam Pass Guarantee, you can focus all your attention on the learning process instead of stressing out about pass rates!
-
-
What are the pre-requirements for taking the CISM?
-
In order to receive the CISM certification, you must submit verified evidence of a minimum of five years of information security work experience, with a minimum of three years of information security management work. This work experience must be gained within a ten-year time period before the application date for certification — or within five years of originally passing the exam. Click here for more information about the pre-requirements of the CISM.
-
-
What qualifies as information security management experience?
-
The information security management field is broad and, out of necessity, often encompasses many duties within the security profession. Due to this, ISACA has defined four categories within their Job Task Analysis in order to narrow down their definition of what constitutes as information security management work. CISM candidates must perform the designated tasks within at least 3 of these 4 categories. Click here to see ISACA’s breakdown of their Job Task Analysis domains.
-
-
How does the CISM examination process work?
-
As of 2017, the CISM is administered digitally. The format is multiple-choice, with questions delivered one-at-a-time, giving you the option to flag more difficult ones to return to later. While it is multiple-choice, some questions may have more than one correct answer. In these instances, the test-taker must select the answer that they believe is most correct. The exam lasts around 4 hours and includes 150 questions.
-
-
Is the online CISM boot camp as effective and informative as an in-person training session?
-
The short answer: Yes! Participants of the live online boot camp also get an Exam Pass Guarantee and other training features in addition to a live instructor.
-
-
How is the CISM related to the DoD 8570?
-
The Department of Defense (DoD) Directive 8570 requires anyone seeking a government job to hold certain certifications before they can be hired in a position related to information security. The CISM fulfills the DoD 8570’s requirements.
-
-
What material is covered on the CISM exam?
-
The CISM exam covers four domains that are weighted as follows: Information Security Governance (24%), Information Risk Management and Compliance (30%), Information Security Program Development and Management (27%), and Information Security Incident Management (19%). Click here for a detailed breakdown of what each domain covers.
-
-
How is the CISM certification different from the other comparable security certifications?
-
The CISM is unique in its focus on management and meeting experience requirements. While other certifications are focused on tech skills or platform/product-specific knowledge, the CISM targets professionals who have progressed beyond the role of the practitioner.
-
-
How does the CISM experience waiver work?
-
Certain experience substitutions can be used to satisfy the information security work experience requirement. However, none of these waivers satisfy any portion of the 3-year information security management requirement. For a detailed breakdown of what fulfills the experience substitution criteria, click here.
-
-
How long is the CISM certification valid after you pass the test, and what are the renewal requirements?
-
The CISM certification remains valid if holders comply with the continuing education policy of completing and reporting 20 CPE (Continuing Professional Education) hours annually and paying the CISM maintenance fee. Click here for more information on maintaining your CISM.
-
-
Is an exam voucher included with the purchase of this course?
-
Yes, an exam voucher is included.
-
-
What are some tips for preparing for the CISM?
-
Enrolling in an exam prep course like Infosec’s is a fantastic step towards earning your CISM. And with our exam pass rate of 94%, no one in the industry can compare! Other things you can do to get ready for the exam include making use of ISACA’s official prep guide, taking practice exams online, and figuring out which methods of self-study work best for you. Click here to read more tips for CISM exam success.
-
Sign up