Information security governance, risk management, security program development and incident management for managers — aligned to the ISACA CISM job practice.
What is Certified Information Security Manager (CISM)?
Certified Information Security Manager (CISM) is an advanced-level, 8-week instructor-led course that prepares you for the CISM exam at INFOTICS Academy. Delivery: Live online / on campus. The fee is shared individually after you apply. Register your interest and we will tell you when the next intake opens.
CISM is the credential for people who manage, design and oversee an enterprise's information-security program. It is less about configuring tools and more about governance, risk, strategy and leadership: aligning security with business goals, deciding what risk is acceptable, building a program, and leading the response when incidents occur.
The course is organized around the four CISM domains — information security governance, information security risk management, information security program, and incident management — with case-based discussion, scenario questions and timed practice. The exam is 150 multiple-choice questions over four hours; ISACA also requires relevant work experience for the certification.
Certified Information Security Manager (CISM) at a glance
Certification
ISACA Certified Information Security Manager (CISM)
Exam code
CISM
Vendor / track
ISACA
Level
Advanced
Duration
8 Weeks
Delivery
Live online / on campus
Exam voucher
10% off the ISACA CISM exam INFOTICS reserves the right to change or end this offer at any time without prior notice. Please confirm the current offer with an advisor when you enroll.
Course fee
Shared after you apply (personalized quote)
Attendance for certificate
At least 75%
Last updated
Exam outline checked
Updated outline: ISACA's updated CISM exam content outline applies from 3 November 2026: the four domains stay, weighted Governance 18%, Risk Management 20%, Security Program 33% and Incident Management 29%, with new content on enterprise and information security architecture. Batches sitting the exam after that date are taught to the 2026 outline.
Why is Certified Information Security Manager (CISM) worth it?
CISM from ISACA is aimed at people who manage information security: governance, risk, programs and incident management.
It is often asked for in security manager and information security officer roles, especially in banks and regulated companies.
Exam voucher offer through INFOTICS: 10% off the ISACA CISM exam. INFOTICS reserves the right to change or end this offer at any time without prior notice. Please confirm the current offer with an advisor when you enroll.
What will you learn?
Establish and maintain an information security governance framework aligned to organizational strategy
Identify, assess and treat information risk and report it to leadership
Develop, run and measure an information security program including architecture, awareness and controls
Build incident management and response capability including business-continuity links
Interpret frameworks and standards such as ISO/IEC 27001, NIST CSF and COBIT in a management context
Approach CISM scenario questions with the "manager's mindset" and a proven revision plan
Who is this course for?
Designed for
Security analysts and engineers moving into management, IT managers, risk and compliance professionals, auditors and CISOs-in-the-making.
Prerequisites
Professional experience in information security or IT risk is strongly recommended. ISACA requires five years of relevant work experience (with permitted substitutions) to be awarded the certification; you can take the exam before completing the experience requirement.
What is in the curriculum?
5 modules · 24 recorded lessons and labs. Live classes follow the same order; recordings and slides unlock in your learner account after you enroll.
Module 1 Information security governance5 lessons
Strategy, roles and frameworks.
Enterprise governance and security strategy
Roles, responsibilities and reporting
Policies, standards and procedures
Frameworks: ISO/IEC 27001, NIST CSF, COBIT
Metrics and management reporting
Module 2 Information security risk management5 lessons
Understand and treat risk.
Risk identification and asset classification
Risk assessment methods and analysis
Risk treatment: mitigate, transfer, accept, avoid
Third-party and supply-chain risk
Risk monitoring and reporting
Module 3 Information security program6 lessons
Build and run the program.
Program development and resources
Enterprise architecture and information security architecture (2026 outline)
Control selection and implementation
Awareness, training and culture
Vendor management, change and configuration
Program measurement and improvement
Module 4 Incident management5 lessons
Prepare, respond, recover.
Incident management and response plans
Detection, triage, escalation and containment
Forensics, evidence and lessons learned
Business continuity and disaster recovery integration
Tabletop exercise: ransomware scenarioLab
Module 5 Exam preparation3 lessons
Think like a security manager.
CISM question style and the manager's mindset
Timed practice assessment on this platformLab
Weak-area review and exam-day planning
Which hands-on labs come with this course?
6 labs on real machines or real consoles, checked for you. 1 is free to try with a learner account. The rest open in your learner portal after you enroll.
Small batches with attendance recorded every session. A 75% attendance record is required for the completion certificate.
Recorded lessons and materials
Catch up on any class and revise from recordings, slides and PDFs in the LMS.
Guided hands-on labs
Scenario-based lab work you complete and submit evidence for.
Proctored mock exam
A 91-minute timed assessment with domain-level scoring and controlled retakes.
Verified digital badge and certificate
Earn a shareable badge and a QR-verified certificate, each with a public verification page.
Career portal access
CV and portfolio profile, job board and employer visibility for your verified credentials.
Independent training provider: this course prepares you for the CISM exam. The exam itself is sat and paid for separately with the certifying body. INFOTICS badges and certificates are training credentials, not vendor certifications.
has successfully passed the proctored certification assessment and is certified in
Certified Information Security Manager (CISM)
November 01, 2026 Issued by: INFOTICS Academy Verify: mail.infotics.edu.pk/credentials/verify/…
Certificate and digital badgeIssued the moment you pass, with your name, score and the skills you proved.
Add to LinkedIn in one clickRecruiters see a verified credential, not a screenshot.
Verifiable by QR and IDEvery credential has a live public page that employers can check in seconds.
How do you join?
Step 1Try it freeBook a free demo class or ask an advisor on WhatsApp: fee, timings and installments, no obligation.
Step 2Reserve your seatApply online; an advisor confirms your personalized fee. Your place is activated once 50% is paid; the rest can be paid in installments.
Step 3Learn, practice, certifyLive classes with recordings, hands-on labs, practice tests and exam guidance, then your certificate and digital badge.Live classesLabsPractice testsDigital badge
When does the next batch start?
No batch is open for enrollment right now
New batches are scheduled regularly. Register your interest and we will contact you as soon as dates for Certified Information Security Manager (CISM) are confirmed.
Frequently asked questions about Certified Information Security Manager (CISM)
What are the CISM exam domains?
Information security governance, information security risk management, information security program, and incident management. From 3 November 2026 they are weighted 18%, 20%, 33% and 29%, and the outline adds enterprise and information security architecture.
Do I need five years of experience to attend?
No. You can take the course and the exam earlier, but ISACA requires the work experience before it awards the certification.
Deploy, manage, secure and troubleshoot Windows Server on-premises, in hybrid setups and in Azure: AD DS, Hyper-V and Azure VMs, DNS and DHCP, storage and Azure Files, security hardening and monitoring. Aligned to AZ-802.
3 Months
AZ-8022026 outline
Up to 30% off the Microsoft exam (Pearson VUE)
INFOTICS may change or end this offer without prior notice. Confirm when you enroll.