10% OFF VCF Special Offer – Limited Seats Available! Claim my offer
ISACA · Advanced

Certified Information Security Manager (CISM)

Information security governance, risk management, security program development and incident management for managers — aligned to the ISACA CISM job practice.
ISACA
  1. 5 modules
  2. 24 lessons
  3. Exam certificate + badge
Exam
CISM
Duration
8 Weeks
Level
Advanced
Delivery
Live online / on campus

What is Certified Information Security Manager (CISM)?

Certified Information Security Manager (CISM) is an advanced-level, 8-week instructor-led course that prepares you for the CISM exam at INFOTICS Academy. Delivery: Live online / on campus. The fee is shared individually after you apply. Register your interest and we will tell you when the next intake opens.

CISM is the credential for people who manage, design and oversee an enterprise's information-security program. It is less about configuring tools and more about governance, risk, strategy and leadership: aligning security with business goals, deciding what risk is acceptable, building a program, and leading the response when incidents occur.

The course is organized around the four CISM domains — information security governance, information security risk management, information security program, and incident management — with case-based discussion, scenario questions and timed practice. The exam is 150 multiple-choice questions over four hours; ISACA also requires relevant work experience for the certification.

Certified Information Security Manager (CISM) at a glance
CertificationISACA Certified Information Security Manager (CISM)
Exam codeCISM
Vendor / trackISACA
LevelAdvanced
Duration8 Weeks
DeliveryLive online / on campus
Exam voucher10% off the ISACA CISM exam
INFOTICS reserves the right to change or end this offer at any time without prior notice. Please confirm the current offer with an advisor when you enroll.
Course feeShared after you apply (personalized quote)
Attendance for certificateAt least 75%
Last updated
Exam outline checked
Updated outline: ISACA's updated CISM exam content outline applies from 3 November 2026: the four domains stay, weighted Governance 18%, Risk Management 20%, Security Program 33% and Incident Management 29%, with new content on enterprise and information security architecture. Batches sitting the exam after that date are taught to the 2026 outline.

Why is Certified Information Security Manager (CISM) worth it?

  • CISM from ISACA is aimed at people who manage information security: governance, risk, programs and incident management.
  • It is often asked for in security manager and information security officer roles, especially in banks and regulated companies.
  • Exam voucher offer through INFOTICS: 10% off the ISACA CISM exam. INFOTICS reserves the right to change or end this offer at any time without prior notice. Please confirm the current offer with an advisor when you enroll.

What will you learn?

  • Establish and maintain an information security governance framework aligned to organizational strategy
  • Identify, assess and treat information risk and report it to leadership
  • Develop, run and measure an information security program including architecture, awareness and controls
  • Build incident management and response capability including business-continuity links
  • Interpret frameworks and standards such as ISO/IEC 27001, NIST CSF and COBIT in a management context
  • Approach CISM scenario questions with the "manager's mindset" and a proven revision plan

Who is this course for?

Designed for

Security analysts and engineers moving into management, IT managers, risk and compliance professionals, auditors and CISOs-in-the-making.

Prerequisites

Professional experience in information security or IT risk is strongly recommended. ISACA requires five years of relevant work experience (with permitted substitutions) to be awarded the certification; you can take the exam before completing the experience requirement.

What is in the curriculum?

5 modules · 24 recorded lessons and labs. Live classes follow the same order; recordings and slides unlock in your learner account after you enroll.

Module 1 Information security governance5 lessons

Strategy, roles and frameworks.

  • Enterprise governance and security strategy
  • Roles, responsibilities and reporting
  • Policies, standards and procedures
  • Frameworks: ISO/IEC 27001, NIST CSF, COBIT
  • Metrics and management reporting
Module 2 Information security risk management5 lessons

Understand and treat risk.

  • Risk identification and asset classification
  • Risk assessment methods and analysis
  • Risk treatment: mitigate, transfer, accept, avoid
  • Third-party and supply-chain risk
  • Risk monitoring and reporting
Module 3 Information security program6 lessons

Build and run the program.

  • Program development and resources
  • Enterprise architecture and information security architecture (2026 outline)
  • Control selection and implementation
  • Awareness, training and culture
  • Vendor management, change and configuration
  • Program measurement and improvement
Module 4 Incident management5 lessons

Prepare, respond, recover.

  • Incident management and response plans
  • Detection, triage, escalation and containment
  • Forensics, evidence and lessons learned
  • Business continuity and disaster recovery integration
  • Tabletop exercise: ransomware scenarioLab
Module 5 Exam preparation3 lessons

Think like a security manager.

  • CISM question style and the manager's mindset
  • Timed practice assessment on this platformLab
  • Weak-area review and exam-day planning

Which hands-on labs come with this course?

6 labs on real machines or real consoles, checked for you. 1 is free to try with a learner account. The rest open in your learner portal after you enroll.

What is included in the fee?

Live instructor-led classes

Small batches with attendance recorded every session. A 75% attendance record is required for the completion certificate.

Recorded lessons and materials

Catch up on any class and revise from recordings, slides and PDFs in the LMS.

Guided hands-on labs

Scenario-based lab work you complete and submit evidence for.

Proctored mock exam

A 91-minute timed assessment with domain-level scoring and controlled retakes.

Verified digital badge and certificate

Earn a shareable badge and a QR-verified certificate, each with a public verification page.

Career portal access

CV and portfolio profile, job board and employer visibility for your verified credentials.

Independent training provider: this course prepares you for the CISM exam. The exam itself is sat and paid for separately with the certifying body. INFOTICS badges and certificates are training credentials, not vendor certifications.

How do you prove what you learned?

What you will earn

INFOTICS Academy hereby certifies that

Your Name

has successfully passed the proctored certification assessment and is certified in

Certified Information Security Manager (CISM)

November 01, 2026
Issued by: INFOTICS Academy
Verify: mail.infotics.edu.pk/credentials/verify/…
  • Certificate and digital badgeIssued the moment you pass, with your name, score and the skills you proved.
  • Add to LinkedIn in one clickRecruiters see a verified credential, not a screenshot.
  • Verifiable by QR and IDEvery credential has a live public page that employers can check in seconds.

How do you join?

  1. Step 1Try it freeBook a free demo class or ask an advisor on WhatsApp: fee, timings and installments, no obligation.
  2. Step 2Reserve your seatApply online; an advisor confirms your personalized fee. Your place is activated once 50% is paid; the rest can be paid in installments.
  3. Step 3Learn, practice, certifyLive classes with recordings, hands-on labs, practice tests and exam guidance, then your certificate and digital badge.

When does the next batch start?

No batch is open for enrollment right now

New batches are scheduled regularly. Register your interest and we will contact you as soon as dates for Certified Information Security Manager (CISM) are confirmed.

Frequently asked questions about Certified Information Security Manager (CISM)

What are the CISM exam domains?
Information security governance, information security risk management, information security program, and incident management. From 3 November 2026 they are weighted 18%, 20%, 33% and 29%, and the outline adds enterprise and information security architecture.
Do I need five years of experience to attend?
No. You can take the course and the exam earlier, but ISACA requires the work experience before it awards the certification.

More questions? Read the general FAQ or ask a counselor.

Fee on request No open batch
Fee & batch Notify me