ISACA

Certified Information Security Manager

CISM

The Certified Information Security Manager (CISM) certification validates your expertise in information security governance, risk management, program development, and incident management. Designed for mid-to-advanced career IT professionals aspiring to senior management roles, CISM demonstrates your ability to align security programs with business goals and lead enterprise security initiatives. Earning CISM signals to employers that you can assess risks, implement effective governance, and proactively respond to incidents, making you a trusted leader in the field.

Practice Free Questions

4Domains

18Objectives

114Practice pages

538Free questions

CISM free practice questions

Choose any objective and open any question page — no sign-in required.

Organizational Culture

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Legal, Regulatory and Contractual Requirements

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Organizational Structures, Roles and Responsibilities

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Information Security Strategy Development

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Information Governance Frameworks and Standards

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

Strategic Planning (Budgets, Resources, Business Case)

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Emerging Risk and Threat Landscape

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Vulnerability and Control Deficiency Analysis

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

Risk Assessment and Analysis

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Risk Treatment / Risk Response Options

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Risk and Control Ownership

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Risk Monitoring and Reporting

37 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–37

Program Foundation and Governance

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

Program Implementation and Operations

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

Program Communication and External Management

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Preparation

33 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–33

Response

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–26

Post-Incident Activity

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (18 objectives · 114 pages).

Certified Information Security Manager

CISM free practice questions

Domain 1 · Domain 1: Information Security Governance29% of practice bank · 6 objectives · 156 questions29%

Domain 2 · Domain 2: Information Security Risk Management36% of practice bank · 6 objectives · 194 questions36%

Domain 3 · Domain 3: Information Security Program18% of practice bank · 3 objectives · 99 questions18%

Domain 4 · Domain 4: Incident Management17% of practice bank · 3 objectives · 89 questions17%