← All pathways

CISM

ISACA Full prep

ISACA · Blueprint 2022-06-01 · verified 21 September 2026

Get ready for the ISACA CISM exam with practice written to the current blueprint. Every answer is explained, and your results show which domains need the most work.

574 practice questions 160 flashcards 4 domains covered 4 paired ADTP courses

Try it now

15 flashcards and 10 practice questions with every answer explained. No account needed.

Try CISM free Become an Associate Member for 100 cards and 30 questions Already a member? Sign in
Try practice questionsFree sample, no account Flashcards160 cards, spaced repetition Study planJoin free to build one Earn a certificate now4 paired ADTP courses
What this exam rewards

Management decisions, not technical execution. Gather information, respect ownership, align to the business objective, follow the sequence.

Blueprint

1 Information Security Governance 17%
2 Information Security Risk Management 20%
3 Information Security Program 33%
4 Incident Management 30%

Weightings taken from the owner's published exam outline. Owner's site.

Your tools for this exam

Free

Free sample

15 cards and 10 questions, every answer explained exactly as members see it.

Try it free
Associate Member

Flashcards with spaced repetition

Each card comes back when it is due, so study time goes to what you are about to forget. 160 cards in the full deck.

Become an Associate Member to continue
Associate Member

Direction-finder

Twenty-four questions across every domain that say where to start.

Become an Associate Member to take it
Practitioner

Domain checks

A measured check of one domain at a time, with a band and every item explained. Pick a domain in the blueprint above.

Become an Associate Member to see them
Associate Member

Study plan

A week-by-week plan built from your results and the time you have, updated as you improve.

Become an Associate Member to build one
Practitioner

Readiness form

A full-length mock at the real exam's size. A pass-likelihood band is released only when four conditions hold.

Become an Associate Member to see it

What this pathway contains

160Flashcards

Blueprint-weighted, one idea per card, with the objective each one serves.

574Practice items

A direction-finder, and a check per domain with rationales withheld until you submit.

150Readiness form

Matches the real exam's length. A band is released only under four conditions.

After the exam

The certificate is the start of the job, not the end of it. This exam tests what you know about the subject. The Association's courses cover what the role asks for once the certificate is on the wall, and each one ends in an artefact you keep.

Browse the course catalog