Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Training Camp's 4-day ISACA CISM boot camp covers all 4 domains: governance, risk, program development, and incident management. Includes exam voucher, official courseware, and free retake.

ISACA Partner of the Year Winner

ISACA CISM Boot Camp

Official ISACA CISM Boot Camp. Expert training, mobile app, exam voucher, free retake, and onsite testing included. Train like your career depends on it.

Verified for 2026 CISM-2022 Exam
Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Free Retake

Exam Protection Included

Official ISACA

Authorized Training

Proven by 50,000+. Backed by our Free Retake Guarantee

Start Monday. Test by Friday No Waiting. No Risk.

4 days designed for audit and compliance professionals who need results fast. Walk out exam-ready with our free retake guarantee.

Program Abstract

REF: CISM-2022 4
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 4

The CISM exam is Hard. We Know How to Pass It.

Information security management demands strategic thinking, not just technical skills. This intensive 4-day program covers all four CISM domains, teaching you to build and manage enterprise security programs, respond to incidents, and align security with business objectives. By Thursday, you’ll be ready to pass.

Official ISACA Training.

Third-party materials can’t keep up with exam changes. We use ISACA’s authorized courseware, so you’re studying exactly what’s on the test—not outdated guesswork.

System Integrity Check
Content Source ISACA Official
Curriculum Ver. 2026v2
Instructor Auth. Verified
Exam Alignment 100% MATCH

Exam Fee Included.

$575 exam voucher included with your enrollment. No surprise costs, no last-minute purchases—just focus on passing.

Mobile Learning

Start Right Away

Unlock iOS/Android app immediately upon enrollment.

Authorized Material

Course from the Source

Official courseware, matched to the current exam version.

All-Inclusive

Exam Fee Included

We cover your $575 exam fee. No hidden costs.

Sim Engine

Exam Deja Vu

Practice with exam-style questions. No surprises.

Retake Policy

Exam Protection Included

Unlimited class returns if you need a second shot.

Flexible Schedule

Training Fits Your Life

Day, evening, online or in-person—your choice.

Test Center

Test While It's Fresh

Take your exam on-site within 7 days of class.

Expert Support

Never On Your Own

180 days of unlimited 1-on-1 coaching after class.

Test Thursday. No Waiting.

Our private PSI testing center means you take your exam immediately after class. No scheduling delays, no waiting weeks to test while knowledge fades.

Thursday 5PM
Bootcamp Concludes - You leave with a personalized attack plan.
Class Ends
Unlimited 1-on-1
AI Gap Analysis - We identify your weak domains using our simulation engine.
Gap Analysis
Exam Day
Exam Protection Active - If you don't pass, your next seat is free.
Certified
·
Training materials including official courseware and study guides
Practitioner Led
Our instructors work in the fields they teach, not just in the classroom.

"Frameworks are in the book. I teach how they hold up when the assessor shows up."

Jeff Porch

VP Ed. Services • CISSP, CISM All of our trainers carry a wide range of certifications, including the certification for every program they teach or manage.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom instruction with direct instructor access, hands-on labs and peer collaboration.

  • Face-to-face instruction
  • On-site exam option
Student attending live online training
B

Live Online

The same instructors and curriculum, delivered live from anywhere on our virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

CISM Certification Training

Partner of the Year

CISM training from an ISACA Partner of the Year, backed by 25 years of certification experience and delivered as a 4-day CISM boot camp.

CISM Examination

We Deliver ISACA Exams

Sit the CISM exam at the end of class. We deliver CISM exams onsite, so there is no separate testing appointment to book elsewhere.

CISM Test Exam

Free Exam Retake

Don’t pass on your first attempt? Exam assurance gives you a free second exam voucher and a full course retake.

CISM Study Guide

Governance Scenario Labs

Governance is 17% of the 2022 outline (18% from November 3, 2026), yet 38% of first-attempt failures happen there. Day 1 front-loads governance labs.

CISM Domain Knowledge

CISM in Demand

We’ve delivered 10,000+ CISM exams onsite. Candidates fail by memorizing frameworks they can’t map to 4-option scenarios, so we drill eliminate two, debate two.

CISM Exam Support

Dedicated Ongoing Support

Keep access to your instructor and valuable cybersecurity resources after class ends, so help is there while you put CISM skills to work.

ISACA CISM Boot Camp

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    CISM Training Camp
    Syllabus

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    Request Info

    MODULE_ID: PREP

    Live Training QS: ~5
    BEFORE CLASS
    Critical Path

    Pre-Course Preparation

    Pre-course preparation sets the foundation for your CISM boot camp success.
    L.prep.1

    MODULE_ID: CISM-01

    Live Training QS: ~5
    DAY 1
    Critical Path

    Information Security Governance & Risk Management Foundations

    CISM Exam Format, Scoring and the November 2026 Outline
    L.01.1
    Organizational Culture, Structure and Security Governance Roles
    L.01.2
    Legal, Regulatory and Contractual Requirements for Security
    L.01.3
    Aligning Information Security Strategy With Business Goals
    L.01.4
    Enterprise Architecture and Information Security Architecture Concepts
    L.01.5
    Security Strategy Development, Roadmaps and Gap Analysis
    L.01.6
    CISO Reporting Lines and Board-Level Security Oversight
    L.01.7
    Lab: Governance Scenario, Mapping Strategy to Business Objectives
    L.01.8
    Security Policies, Standards, Procedures and Guidelines Hierarchy
    L.01.9
    Governance Frameworks: COBIT 2019, ISO/IEC 27001 and NIST CSF 2.0
    L.01.10
    Strategic Planning, Budgeting and Security Business Cases
    L.01.11
    Information Security Metrics, KPIs and Balanced Scorecards
    L.01.12
    Risk Management Concepts, Frameworks and Terminology
    L.01.13
    Risk Appetite, Risk Tolerance and Acceptance Criteria
    L.01.14
    Lab: Eliminate Two, Debate Two on Governance Questions
    L.01.15

    MODULE_ID: CISM-02

    Live Training QS: ~6
    DAY 2
    Critical Path

    Information Security Risk Management

    Emerging Risk, Threat Landscape and Vulnerability Analysis
    L.02.1
    Information Asset Identification, Classification and Valuation
    L.02.2
    Qualitative, Quantitative and Semi-Quantitative Risk Analysis
    L.02.3
    Business Impact Analysis and Recovery Objectives
    L.02.4
    Industry Standards: ISO/IEC 27005 and NIST SP 800-30
    L.02.5
    Legal, Regulatory and Contractual Risk Requirements
    L.02.6
    Lab: Build a Risk Register From an Asset Inventory
    L.02.7
    Risk Treatment Options: Mitigate, Transfer, Accept, Avoid
    L.02.8
    Control Selection, Design and Cost-Benefit Justification
    L.02.9
    Third-Party and Supply Chain Risk Management
    L.02.10
    Risk and Control Ownership and Accountability
    L.02.11
    Risk Monitoring, Key Risk Indicators and Reporting
    L.02.12
    Communicating Residual Risk to Executive Stakeholders
    L.02.13
    Lab: Risk Treatment Scenario and Control Recommendation
    L.02.14
    Domain 1 and 2 Practice Questions and Review
    L.02.15

    MODULE_ID: CISM-03

    Live Training QS: ~6
    DAY 3
    Critical Path

    Information Security Program Development & Management

    Security Program Resources, Charter and Roadmap
    L.03.1
    Information Security Architecture, Design Principles and Patterns
    L.03.2
    Control Frameworks: ISO/IEC 27002, NIST SP 800-53, CIS Controls
    L.03.3
    Identity and Access Management Program Design
    L.03.4
    Network, Endpoint, Cloud and Application Security Controls
    L.03.5
    Data Classification, Encryption and Privacy Protection
    L.03.6
    Lab: Select Controls Against a Security Architecture Gap
    L.03.7
    Security Awareness, Training and Culture Programs
    L.03.8
    Integrating Security Into Change, SDLC and Procurement
    L.03.9
    Vendor and Third-Party Security Management Lifecycle
    L.03.10
    Security Program Metrics, KPIs and Executive Reporting
    L.03.11
    Resource Management, Budgeting and Program Staffing
    L.03.12
    Control Testing, Assurance and Continuous Improvement
    L.03.13
    Lab: Program Metrics Scenario and Board Report
    L.03.14
    Domain 3 Practice Questions and Review
    L.03.15

    MODULE_ID: CISM-04

    Live Training QS: ~7
    DAY 4
    Critical Path

    Incident Management & Program Operations

    Incident Response Plan, Policy and Playbook Development
    L.04.1
    Incident Classification, Severity Levels and Escalation
    L.04.2
    Business Continuity and Disaster Recovery Plan Integration
    L.04.3
    Incident Response Team Roles, Training and Tabletop Exercises
    L.04.4
    Incident Management Tools, SIEM and Threat Intelligence
    L.04.5
    Detection, Triage and Investigation Procedures
    L.04.6
    Lab: Tabletop Exercise, Ransomware Incident Decision Points
    L.04.7
    Containment, Eradication and Recovery Methods
    L.04.8
    Digital Forensics and Evidence Preservation Requirements
    L.04.9
    Breach Notification, Regulatory and Legal Obligations
    L.04.10
    Crisis Communication With Executives and External Parties
    L.04.11
    Post-Incident Review, Lessons Learned and Metrics
    L.04.12
    Lab: Incident Management Scenario Questions by Domain
    L.04.13
    Full-Length Practice Exam and Review
    L.04.14
    Exam: CISM
    L.04.15

    MODULE_ID: POST

    Live Training QS: ~7
    AFTER CLASS
    Critical Path

    After Class

    COURSE PROGRESS Day 0 of 4
    FREQUENTLY ASKED QUESTIONS

    Official ISACA CISM
    Boot Camp FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    The Certified Information Security Manager (CISM) is ISACA’s management-focused security certification for professionals who design, build and manage enterprise information security programs. It’s ideal for IT security managers, directors, consultants, and executives who want to validate their expertise in governance, risk management, program development, and incident management. CISM is consistently ranked among the highest-paying IT certifications globally.

    To obtain the CISM certification, you must pass the CISM exam (scoring 450+ out of 800) and demonstrate 5 years of information security work experience, with at least 3 years in security management roles. Experience must be gained within the 10-year period preceding certification application. Certain experience substitutions are available for related certifications like CISA or CISSP. You must also adhere to ISACA’s Code of Ethics and complete 20 CPE hours annually to maintain certification.

    Our CISM boot camp runs for 4 consecutive days (8:30am-5:00pm daily) covering all four CISM domains. Day 1 focuses on Information Security Governance, Day 2 on Risk Management, Day 3 on Security Program Development, and Day 4 on Incident Management with a full exam review. The four domains carry over to the ISACA outline effective November 3, 2026, with new weights of 18%, 20%, 33% and 29%. Available in both in-person and virtual formats, the intensive structure includes lectures, case studies, practice questions, and interactive discussions designed for working professionals

    All CISM classes are taught by certified information security practitioners with minimum 10+ years of hands-on security management experience and 5+ years of CISM training expertise. Our instructors maintain active roles in the security field, hold multiple certifications (CISM, CISSP, CISA), and undergo rigorous training in adult learning methodologies. With a maximum instructor-to-student ratio of 1:15, you’ll receive personalized attention and real-world insights from experienced security leaders.

    Your registration includes comprehensive study materials: official ISACA-aligned CISM courseware, digital study guide, course workbook, and 12-month access to 1000+ ISACA QAE Database practice questions. You’ll also receive 90-day access to 40+ hours of domain-specific training videos, digital flashcards, quick reference guides, and complete recordings of your class sessions. All materials are accessible through our Learning Management System before, during, and after your training.

    Our track record reflects our confidence in your success, backed by our Free Retake Guarantee. If you don’t pass the CISM exam on your first attempt after completing our boot camp, you can retake the same course format once at no additional charge within 12 months. Beyond this, you’ll have ongoing instructor support for 90 days after your course, access to weekly Q&A webinars, and an exclusive CISM community forum for peer support until you successfully achieve certification.

    Get the Free
    CISM Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    ISACA CISM
    Study Tools & Resources

    Your journey to ISACA CISM certification starts with a tailored preparation strategy. We’ve gathered expert insights to guide you every step of the way.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Free practice test

    Not sure you are ready for the CISM exam yet?

    Our free CISM practice test runs 50 questions on a 80-minute timer, with an explanation for every answer choice, not just the right one. Short on time? Take the 25-question quick version instead.

    Start the CISM test
    Continue Your Journey

    CISM Related Courses

    Advance your career with these recommended certifications

    Featured on