10% OFF VCF Special Offer – Limited Seats Available! Claim my offer
Log in Get started
Free practice test · ISACA

Free CISM practice test

15 exam-style practice questions for Certified Information Security Manager (CISM). Take your time (about 15 minutes), then see your score, the topics to work on and the correct answers with explanations.
Start the test
In this test15 questions
  • Incident management5
  • Information security program4
  • Risk management3
  • Governance3
About 15 min Instant score Answers explained
1 of 15Risk management

What is residual risk?

2 of 15Incident management

What is the main purpose of a business continuity plan?

3 of 15Risk management

What is the main concern with third-party service providers?

4 of 15Incident management

A business impact analysis (BIA) primarily helps determine:

5 of 15Governance

What does a RACI chart define?

6 of 15Information security program

What is the role of internal audit in information security?

7 of 15Incident management

What should be in place BEFORE an incident occurs?

8 of 15Information security program

What is the main benefit of periodic access recertification?

9 of 15Governance

What is the difference between a standard and a guideline?

10 of 15Incident management

What should trigger activation of the incident response plan?

11 of 15Information security program

What is the FIRST step in developing an information security program?

12 of 15Incident management

What is the purpose of a post-incident review?

13 of 15Information security program

Which BEST measures the effectiveness of awareness training?

14 of 15Governance

Which approach helps obtain senior management commitment to security?

15 of 15Risk management

What is the FIRST step in a risk assessment?

See your score

We show your score, topic breakdown and the answers straight away. A counselor may WhatsApp you once to suggest the right batch; reply STOP any time.