To reflect the shifting priorities of security professionals and the evolving technologies that impact their work, ISACA has updated the exams and review materials for the Certified Information Security Manager (CISM) certification.
The updated CISM exam preparation materials were updated on 1 September, and the updated CISM exam will be available on 3 November 2026. The exam format will include greater emphasis on information security strategy and program development, and will add two new content areas: enterprise architecture and information security architecture, reflecting the need to understand the technologies under a security manager’s purview.
The four CISM domains will remain the same, but the distribution of select exam content will slightly change to the following:
- Domain 1: Information Security Governance (18 percent)
- Domain 2: Information Security Risk Management (20 percent)
- Domain 3: Information Security Program (33 percent)
- Domain 4: Incident Management (29 percent)
The management-focused CISM is the globally accepted achievement for individuals who develop, build and manage enterprise information security programs. Sought after by experienced information security managers, the CISM certification is well established in the field, having been earned by more than 111,000 professionals since its inception in 2002. The credential was the winner of the 2025 SC Awards “Best Professional Certification Program.”
Those preparing for the CISM exam have a range of study options and can select from print, online, self-paced or instructor-led updated exam preparation resources, including the QAE Database, Review Manual in print and eBook format, and Online Review Course. Those preparing for an exam taking place on or after 3 November 2026 are strongly recommended to use the updated CISM exam preparation materials that cover these changes.
More information on the CISM exam content outline can be found at https://www.isaca.org/credentialing/cism/cism-exam-content-outline and https://support.isaca.org/s/article/Certification-CISM-Job-Practice-Update-2026. To learn more about CISM and to apply for certification, visit www.isaca.org/cism.
ISACA now offers a full career pathway of information security credentials, ranging from the new Certified Cybersecurity Specialist (CCS) to the Advanced in AI Security Management (AAISM).
About ISACA
ISACA® (www.isaca.org) champions the global workforce advancing trust in technology. For more than 55 years, ISACA has empowered its community of 195,000+ members with the knowledge, credentials, training and network they need to thrive in fields like information security, governance, assurance, risk management, data privacy and emerging tech. With a presence in more than 190 countries and with more than 230 chapters worldwide, ISACA offers resources tailored to every stage of members’ careers—helping them to thrive in a rapidly changing digital landscape, drive trusted innovation and ensure a more secure digital world. Through the ISACA Foundation, ISACA also expands IT and education career pathways, fostering opportunities to grow the next generation of technology professionals.
LinkedIn: www.linkedin.com/company/isaca
Facebook: www.facebook.com/ISACAGlobal
Instagram: www.instagram.com/isacanews
Contact:
communications@isaca.org
Emily Ayala, +1.847.385.7223
Bridget Drufke, +1.847.660.5554
