Examius
🇺🇸 United States · IT
Certified Information Security Manager (CISM) Syllabus
ISACA certification focused on information security management and governance. The full Certified Information Security Manager (CISM) syllabus: 6 subjects, 20 chapters, 68 topics and 137 sub-topics, with 332 flashcards written against it.
Certified Information Security Manager (CISM) subjects
Certified Information Security Manager (CISM) has 6 subjects. Each one is listed below with its chapters in syllabus order; open a subject for every topic and sub-topic inside them.
Information Security Governance
- Enterprise Governance and the Security Function · 4 topics
- Strategy, Mission, and Business Alignment · 3 topics
- Policies, Standards, and Performance · 4 topics
Information Security Risk Assessment
- Risk Concepts and the Risk Landscape · 4 topics
- Asset Identification and Valuation · 3 topics
- Risk Identification and Analysis · 3 topics
Information Security Risk Response and Reporting
- Risk Treatment and Control Selection · 3 topics
- Risk Monitoring and Communication · 3 topics
- Integrating Risk into Operations · 3 topics
Information Security Program Development and Management
- Program Foundations and Resources · 4 topics
- Control and Technology Management · 4 topics
- Awareness, Training, and Documentation · 3 topics
- Program Measurement and Assurance · 4 topics
Information Security Incident Management
- Incident Management Planning · 4 topics
- Detection, Triage, and Response · 4 topics
- Business Continuity and Disaster Recovery · 3 topics
- Post-Incident and Communication · 3 topics
Legal, Regulatory, and Compliance Management
- Legal and Regulatory Landscape · 3 topics
- Compliance Frameworks and Standards · 3 topics
- Compliance Operations and Ethics · 3 topics
Certified Information Security Manager (CISM) flashcards
332 question-and-answer cards across 6 subject decks, each shown in full on its subject page.
- Information Security Governance — 67 cards
- Information Security Risk Assessment — 51 cards
- Information Security Risk Response and Reporting — 51 cards
- Information Security Program Development and Management — 51 cards
- Information Security Incident Management — 61 cards
- Legal, Regulatory, and Compliance Management — 51 cards
Certified Information Security Manager (CISM) syllabus FAQ
What subjects are in the Certified Information Security Manager (CISM) syllabus?
Certified Information Security Manager (CISM) covers 6 subjects: Information Security Governance, Information Security Risk Assessment, Information Security Risk Response and Reporting, Information Security Program Development and Management, Information Security Incident Management and Legal, Regulatory, and Compliance Management.
How many chapters and topics are in the Certified Information Security Manager (CISM) syllabus?
20 chapters and 68 topics, broken down further into 137 sub-topics, across 6 subjects. Information Security Program Development and Management is the largest subject, with 15 topics in 4 chapters.
Are there Certified Information Security Manager (CISM) flashcards?
Yes — 332 question-and-answer flashcards in 6 subject decks. Each deck is printed in full on its subject page here, and the same cards are in the Examius app with spaced repetition. The free plan covers one exam of your choice, including its flashcards; Examius Pro, a one-time purchase, unlocks every other exam and deck.
Related IT syllabuses
Amazon Web Services certification validating skills in designing distributed systems on AWS.
Certified Ethical Hacker (CEH) syllabusEC-Council certification for penetration testing and ethical hacking skills.
Certified Information Systems Auditor (CISA) syllabusISACA certification for professionals who audit, control, and assess information systems.
Certified Information Systems Security Professional (CISSP) syllabusISC2 advanced certification for experienced information security professionals.
Cisco Certified Network Associate (CCNA) syllabusCisco's associate-level certification for networking fundamentals and administration.
CompTIA Security+ syllabusEntry-level vendor-neutral cybersecurity certification from CompTIA covering core security skills.
Google Cloud Professional Cloud Architect syllabusGoogle Cloud certification validating ability to design and manage solutions on Google Cloud Platform.
Microsoft Certified: Azure Administrator Associate syllabusMicrosoft certification validating skills in managing Azure cloud resources and services.
Project Management Professional (PMP) syllabusPMI certification for project managers demonstrating experience and competence leading projects.