ISACA CISM Certification Training & Boot Camp
Certified Information Security Manager
CISM is the management credential of information security: the certification for professionals who build and lead security programs, not just run the tools. In this live, instructor-led 4-day boot camp, you work through all four CISM exam domains and walk out ready to test. Taught by a certified ISACA instructor, with an exam voucher, a free retake, and a clear path to pass built in.
Exam voucher and free retake included.
Prefer to study on your own schedule? Get the self-paced CISM course, $1,649 →
If you do not pass, try again on us
Every seat carries ISACA’s own official exam-prep materials, your exam registration, a year of ISACA membership, and four days of live instruction. It also carries a second chance, at no extra cost.
One free retake, included with every seat and never sold as an add-on. If the exam does not go your way, your next sitting costs you nothing.
| Official ISACA materials, included | |
|---|---|
| Official CISM Review Manual | ISACA’s own exam-prep manual, the eBook edition, written to the current exam content outline. |
| Official QAE database | ISACA’s Questions, Answers and Explanations database, a 6-month subscription, so you practise on real ISACA-style items. |
| Your CISM exam registration | The exam itself, registered and paid for. Nothing further to buy from ISACA to sit it. |
| One year of ISACA membership | Professional membership, which also discounts the CPE, webinars and materials you buy from ISACA afterwards. |
| What Risk Tide adds | |
| Four days of live instruction | A certified ISACA instructor teaching all four CISM exam domains live, answering your questions as they come up. |
| Try Again On Us | Our free retake. Do not pass, and your next exam sitting costs you nothing. |
| CPE hours, documented | The live instruction hours count as CPE toward the credentials you already hold, and we document them for you. |
Your seat includes one year of ISACA professional membership. Local chapters set their own dues separately.
The free retake covers one further exam sitting at no additional cost. ISACA course materials are supplied by ISACA and remain subject to their terms.
Four days across all four CISM exam domains
The boot camp works straight through ISACA’s CISM exam content outline: four job-practice domains, each weighted as it is on the exam. You leave having covered every area the 150-question exam tests.
Information Security Governance
17%- Enterprise governance: culture, organizational structure, and how security strategy aligns to business goals.
- Frameworks, standards, and the legal and regulatory landscape that shape the program.
Information Security Risk Management
20%- Risk identification and assessment: threats, vulnerabilities, and business impact.
- Risk response: treatment options, monitoring, and reporting to stakeholders.
Information Security Program
33%- Program development: resources, asset classification, policies, and awareness.
- Program management: controls, testing, metrics, and integrating security into operations.
Incident Management
30%- Incident readiness: plans, playbooks, classification, and training before anything goes wrong.
- Incident response: containment, communication, recovery, and business continuity and disaster recovery.
Domains and weightings follow ISACA’s official CISM exam content outline. The CISM exam is 150 questions in 4 hours, scored 200 to 800, with 450 to pass.
What the CISM certification does for you
Security teams get built by people who can run them. CISM is how you prove you are one of them.
More than 65,000 professionals have earned CISM since 2002. When the role owns strategy, budget, and a team, this is the credential the posting asks for.
CISM tests judgment, not tools: governance, risk, program, and incident decisions the way a security leader has to make them, in business terms.
Pass the exam and apply for certification to earn ISACA’s CISM credential and digital badge, verifiable and shareable on LinkedIn and your resume.
What you’ll be able to do
- Build and run an enterprise information security program
- Align the security strategy with business goals and win budget
- Own risk decisions: assess, treat, monitor, and report
- Lead incident response from readiness through recovery
- Manage the people, vendors, and budget behind the program
- Report security posture to executives and the board
Send your manager the approval request in one click
Most people need a yes before they can register. This opens a ready-to-send draft in your email app, already making the case. Adjust anything you like before it goes.
›Preview what it says
Fill in the [brackets] before sending.
Learn security leadership from career cybersecurity leaders
Sushila brings over 25 years of leading security strategy for global enterprises and government agencies. She has served as CISO in the United Kingdom and Malaysia and as a global portfolio and practice lead in the United States, running multi-million-dollar cybersecurity portfolios and global delivery teams. She is President of the ISACA Greater Washington D.C. Chapter, the second-largest in the world, and contributes to ISACA Global’s Emerging Trends workgroup. She speaks regularly at RSA and ISACA conferences, hosts the public radio segment Shore Tech Pulse, and has received ISACA’s Technology for Humanity Award and a 2024 Top Cybersecurity Leader recognition.
James brings over 35 years of military, federal, and contracting experience to cybersecurity training. A former USAF senior officer and Defense Intelligence Agency leader, he has managed critical cybersecurity programs for the Department of Defense and DHS. As President of Sycamore Cybersecurity Consultants and Dean of CyberEDGE Academy, James has trained over 2,000 cybersecurity professionals worldwide. He is a certified instructor for ISACA CISM, CISA, CRISC, CGEIT, and AAISM, and holds a BS in Mathematics, three MS degrees, and an MBA.
Your instructor for a given cohort is confirmed ahead of the start date. Our instructors are practicing security leaders, and on occasion a professional or client commitment requires a change. If that happens, Risk Tide will assign another qualified ISACA instructor and let you know in advance. The curriculum, materials, exam voucher, and everything else included in your enrollment stay exactly the same.
Prepare, train, pass
CISM boot camp, answered
What is CISM?
CISM is ISACA’s Certified Information Security Manager certification, the management-level credential for professionals who build and lead information security programs. More than 65,000 professionals have earned it since 2002.
What roles does CISM prepare me for?
CISM validates security leadership: information security manager, security program lead, GRC leadership, and the CISO track. It is the natural next step when your work shifts from running tools to running the program.
What are the requirements for CISM certification?
ISACA requires five years of experience in information security, including at least three years in information security management across three or more CISM domains. Up to two years of the general requirement can be substituted with credentials like CISA or CISSP or a relevant postgraduate degree; the three management years cannot be waived. You can sit the exam first and apply once you meet the requirement.
How is the CISM boot camp structured?
Four full days of live, instructor-led training led by a certified ISACA instructor, working through all four CISM exam domains. You get a pre-study learning path, a 6-month subscription to ISACA’s official QAE database with unlimited practice exam attempts, and exam-strategy support so you walk in ready.
What does the CISM exam look like?
The CISM exam is 150 questions in 4 hours, scored on a 200 to 800 scale, with 450 required to pass. Your exam voucher is included, and after registering you have a scheduling window to sit the exam.
What if I don’t pass the CISM exam?
You can retake the exam at no additional cost. The whole program is built to get you exam-ready, and the free retake is there as a safety net.
What exactly does the free retake cover?
If you sit the CISM exam and do not pass, your next sitting is covered at no additional cost. The retake is one additional exam sitting, and it needs to fall inside your exam eligibility window. There is no extra charge and nothing to buy. Just tell us you need it and we arrange it.
Do I earn CPE for the CISM boot camp?
If you already hold ISACA or other professional credentials, the live instruction hours count as CPE toward them. It is a productive way to make progress on your annual CPE while preparing for a new certification.
What if I need to cancel or move to a different cohort?
16 or more days before the start date: cancel for a full refund, or move to a later cohort, with no penalty either way. 15 or fewer days before the start date: the seat is non-refundable, but you can still move to a later cohort for a $500 USD transfer fee, and the new seat needs to be used within six months of your original start date. Sending a colleague instead costs nothing, as long as you tell us before your ISACA materials have been issued in your name. If we cancel or move a cohort, you choose: a full refund, or a free transfer to any future cohort.
What currency are your prices in?
All prices on this site are in US dollars. Risk Tide Solutions is a Florida limited liability company and bills in USD. If you are paying from outside the United States, your bank or card issuer may add a foreign exchange or international transaction fee, and any taxes or duties that apply where you live are your responsibility. Your seat price also does not include local ISACA chapter dues, which chapters set individually, or ISACA’s certification application fee, which ISACA charges separately after you pass.
Is there a self-paced CISM course?
Yes. If you prefer to study on your own schedule, our self-paced CISM course is $1,649 and includes all four ISACA components: the Online Review Course, the Review Manual eBook, the Questions, Answers and Explanations database, and your exam registration. ISACA lists those four items at $2,193 separately without a membership. The live boot camp is best if you want structure, an instructor, and a fixed timeline to keep you accountable.
Get CISM-certified with an instructor in your corner
Four live days, every exam domain, an included voucher, and a free retake if you need it. Pick the cohort that fits your calendar.
$2,499 per seat, regularly $2,999. Exam voucher and free retake included.
Prefer to study on your own schedule? Get the self-paced CISM course, $1,649 →
Training a team? Explore corporate training or book a time with our team →
ISACA Accredited Training Organization
NASBA National Registry of CPE Sponsors
TPRM TRAINING
