ISACA CISM Voucher

CISM is ISACA’s certification for information security management. It’s focused on governance, risk management, building and running security programs, and incident management.

No prerequisites to sit the exam. To earn the certification, ISACA requires 5 years of information security management experience, and you must apply within the allowed window after passing.

The exam covers 4 domains:
- Information Security Governance
- Information Security Risk Management
- Information Security Program Development and Management
- Incident Management

150 multiple-choice questions, 4 hours (240 minutes).

Scaled score range 200–800, and 450 is the passing score.

CISM is management-focused. It tests how you make decisions, build programs, align security to business goals, and manage risk—not how to configure tools or do deep technical work.

Common paths include Information Security Manager, Security Program Manager, GRC Manager, and governance/risk leadership roles.

It’s challenging if you approach it like a technical exam. The questions are scenario-heavy and aimed at “what should a security manager do next?” decision-making.

CISM stays active with maintenance: 20 CPE per year and 120 CPE per 3-year cycle (plus ISACA’s maintenance requirements).

Typically, vouchers will arrive by email within fourteen (14) days.

Each voucher purchase is its own transaction, but you may buy multiple vouchers. Each voucher code will be send to you separately via email.

Voucher validity varies depending on ISACA's policies. Typically, vouchers are valid for 12 months from the date of purchase. We recommend checking CompTIA’s and ISACA's websites for the most up-to-date details.

Standard vouchers do not include retake options.

Yes, all ISACA vouchers can be used to register for either an in-person or online exam.