CISM — Certified Information Security Manager
Exam CISM ISACA Advanced
The management-track certification: governance, risk management, the security programme and incident management. Pairs with CISSP for anyone moving into leadership. ISACA's new CISM outline applies from 3 November 2026; the weights shown are the new ones. Our practice tests follow the 2022 outline. The new outline adds enterprise and information security architecture, which no CISM course here covers yet; Step 5 links the CISSP Domain 3 & 4 boot camp, which teaches it.
8 courses · 32 sections · 258 lectures · 3 labs · ≈ 5 h of hands-on labs
All 3 CISM hands-on labs on one page →
Free to start: the free lessons and guides for this roadmap →
Exam domains
- Information Security Governance — 18%
- Information Security Risk Management — 20%
- Information Security Program — 33%
- Incident Management — 29%
Try a free hacking lab: Recon to shell (~5 min) → A scripted simulation in your browser. No account needed.
The path
Start here →
Step 1 — Domain 1 — information security governance
Align security with business strategy.
1 course · 6 sections · 49 lectures
Learn
- CourseCISM Certification: CISM Domain 1 Video Boot Camp (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
6 sections · 49 lectures
- New section 1
- Introduction 3
- CISM Domain 1: Information Security Governance 37
- How to study for the CISM certification and how to reach your goals. 3
- The exam and life after it 4
- Bonus lectures. 1
Step 2 — Domain 2 — information security risk management
Identify, assess and treat risk.
1 course · 7 sections · 63 lectures
Learn
- CourseCISM Certification: CISM Domain 2 Video Boot Camp (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
7 sections · 63 lectures
- Training Overview 2
- Introduction 3
- CISM Domain 2: Information Security Risk Management. 49
- Bonus lectures. 3
- The exam and life after it 4
- Bonus lectures. 1
- Audio Version of the Training 1
Step 3 — Domain 3 — information security program
Build and run the programme.
1 course · 7 sections · 87 lectures
Learn
- CourseCISM Certification: CISM Domain 3 Video Boot Camp (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
7 sections · 87 lectures
- Training Overview 2
- Introduction 3
- CISM Domain 3: Information Security Program 73
- Bonus Lecture. 3
- The exam and life after it 4
- Bonus Lecture 1
- Audio Version of the Training 1
Step 4 — Domain 4 — incident management
Prepare for, manage and learn from incidents, with business continuity and disaster recovery. The labs are the manager's ones: Analyze and Update a Company BCP/BIA/DRP/CIRP, Recover from Incident, and Report Writing for Presentation to Management.
1 course · 3 sections · 38 lectures · 3 labs
Learn
- CourseCISM Certification: CISM Domain 4 Video Boot Camp (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
3 sections · 38 lectures
- Introduction 4
- CISM Domain 4: Incident Management 33
- Audio Version of Training 1
Practise
- LabsCyber Defense Incident Responder — 3 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Analyze and Update a Company BCP/BIA/DRP/CIRPDuration: 2 h
- Recover from IncidentDuration: 2 h
- Report Writing for Presentation to ManagementDuration: 1 h
Step 5 — Enterprise and information security architecture
New in ISACA's 2026 outline: how security architecture supports the programme. No CISM course here covers it yet.
Learn
- CourseCovered in CISSP Certification: CISSP Domain 3 & 4 Video Boot Camp (opens in a new tab)opens on courses.stationx.net — its Domain 3 section, Security Architecture and Engineering; a CISSP course, not a CISM one 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
6 sections · 124 lectures
- Introduction 1
- Other practical information. 3
- CISSP Domain 3: Security Architecture and Engineering. 79
- CISSP Domain 4: Communications and Network Security. 39
- Bonus lectures. 1
- Audio Version of the Training 1
Before the exam
- CourseCISM Certification: FULL 150 question CISM practice test (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
2 sections · 3 lectures
- Practice tests 1
- Flashcards 2
- CourseTOTAL: CISM (Info. Security Mgr) Practice Tests - 400 Q's (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
3 sections · 7 lectures
- Training Overview 1
- Practice Tests 4
- Practice Flashcards 2
- CourseCertified Information Security Manager - CISM Practice Questions (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
3 sections · 7 lectures
- Training Overview 2
- CISM Exams Questions 4
- CISM Flashcards 1
- CourseISACA CISM Practice Flashcards (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
1 section · 4 lectures
- CISM Domains 4
