Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

ISACA Partner of the Year Winner

ISACA CISM Self-Paced Training

Governing, managing and leading enterprise information security — strategy, risk management, program development and incident response. Work through every exam domain on your own schedule.

Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Master CISM

On-Demand

Official ISACA

Authorized Training

Learn at Your Pace. Pass When You’re Ready.

Official ISACA. Complete Bundle. 365-Day Access.
On-Demand Access A full year to master the material—study at your own pace with unlimited access to all content.
Your Success.

The Official ISACA CISM Online Review Course Bundle includes everything you need to pass—self-paced video training, the official Review Manual, Questions Answers & Explanations database, and your exam voucher. All from ISACA.

Program Abstract

REF: CISM-2025 4
Curriculum aligned to the latest Exam Outline.
Format Self-Paced, Online Review Course
Access 365 Days

The CISM is Hard. We Know How to Pass It.

You don't need a classroom to pass the CISM—you need the complete bundle from ISACA. This official training package includes self-paced video modules, interactive eLearning activities, case studies, and the authoritative ISACA Review Manual. The QAE database gives you hundreds of practice questions with detailed explanations. With 365 days of access, you can study at your own pace and take your exam when you're ready. Trained by ISACA, certified by ISACA.

Official ISACA Bundle.

Everything you need in one packageOnline course, Review Manual, QAE database, and exam voucher—all from ISACA—trained by ISACA, certified by ISACA. The authoritative content from the certification body itself.

Bundle Contents
Online Review Course Included
Review Manual (Digital) Included
QAE Database Included
Exam Voucher INCLUDED

QAE Database & Review Manual.

QAE DatabaseQuestions, Answers & Explanations—hundreds of practice questions with detailed rationales plus the official ISACA Review Manual in digital format. Video content, interactive modules, and case studies round out your preparation.

Practice Engine

QAE Database

Questions, Answers & Explanations—practice with detailed rationales.

Official Material

Review Manual

Digital ISACA Review Manual—comprehensive domain coverage.

Video Library

Video Modules

Self-paced video content covering all job practice domains.

Interactive

Case Studies

Real-world scenarios and interactive eLearning activities.

365 Days + Exam Voucher.

A full year to master the material. Exam voucher includedYour certification exam fee is included—schedule when ready.—start learning today and test when you're confident.

Day 1
Instant Access Access the Official ISACA Online Review Course immediately.
Begin Learning
365 Days Access
QAE Practice Practice with hundreds of questions and detailed explanations.
Build Mastery
When Ready
Exam Voucher Ready Schedule at PSI testing center or take remotely proctored.
Get Certified
·
CISM training materials including coursebook and study guides
Official Materials
Same courseware used in our live bootcamps.

"Everything you need in one package—I passed on my first try studying just 2 hours a day."

Self-Paced Student

Verified CISM Graduate

Why Choose Self-Paced?

Your Schedule
✓

Fits Your Life

Study around work, family, and life. No need to take time off or travel.

  • No travel required
  • Study anytime
$

Lower Cost

Same quality content at a fraction of bootcamp pricing. No hotels, flights, or meals to budget.

  • Exam voucher included
  • No travel expenses
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

CISM Certification Training

Certify with ISACA Partner of the Year

CISM training backed by 25 years of certification training experience, with 365 days of online self-paced access.

Best CISM Boot Camp

Official ISACA Review Manual

Study from the official ISACA CISM Review Manual, aligned to the current exam content outline.

 CISM Certification Exam

365 Days of Access

Start the day you enroll and study on your own schedule for a full 365 days.

CISM Certification Training Online

Work Smarter – Gain Practical Expertise

Our learning methods help you pass the exam with confidence. They also give you useful knowledge for real-life situations.

CISM Certification Exam Cost

Career Security – ISACA in demand

Our training enhances your long-term career prospects, ensuring your skills and credentials stand out.

CISM Certified Information Security Manager Bundle

Dedicated Support – Ongoing mentoring

Gain access to the ISACA QAE practice database and valuable cybersecurity resources throughout your 365 days of access.

ISACA CISM Self-Paced Training

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    What the CISM Exam
    Covers

    Every domain the exam tests, and what sits inside it.
    Work through them in any order, at whatever pace suits you.

    Request Info

    EXAM DOMAIN

    Self-Paced Topics: 8
    START HERE
    On the Exam

    Getting Started

    Activate Platform Access and the ISACA CISM Review Manual
    L.prep.1
    Navigate Video Modules, eLearning Activities and Case Studies
    L.prep.2
    Take the Baseline Assessment Across All Four Domains
    L.prep.3
    Build a Twelve-Week Study Planner Weighted by Domain
    L.prep.4
    Use the QAE Question Bank in Study and Timed Modes
    L.prep.5
    Confirm Which Exam Content Outline Date Applies to You
    L.prep.6
    Review the ISACA Experience Requirement and Waiver Options
    L.prep.7
    Create an ISACA Account and Review Exam Registration Steps
    L.prep.8

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 1
    On the Exam

    Information Security Governance (18%)

    Organizational Culture and Its Effect on Security Governance
    L.01.1
    Legal, Regulatory and Contractual Requirements Including Privacy
    L.01.2
    Organizational Structures, Roles, Responsibilities and RACI
    L.01.3
    Information Security Strategy Development Aligned to Business Objectives
    L.01.4
    Governance Frameworks and Standards: COBIT, ISO/IEC 27001, NIST CSF
    L.01.5
    Strategic Planning: Budgets, Resources and the Business Case
    L.01.6
    Enterprise Architecture: Business Capabilities, Data Flows and Applications
    L.01.7
    Information Security Architecture Across Hybrid and Cloud Environments
    L.01.8
    Case Study: Presenting a Security Strategy to the Board
    L.01.9
    Translating Security Risk Into Business Terms for Executives
    L.01.10
    Steering Committee Charters and Governance Reporting Lines
    L.01.11
    Practice Questions: Governance Scenarios and Distractor Analysis
    L.01.12
    Mapping Strategy Gaps With a Capability Maturity Model
    L.01.13
    Flashcards: Governance Frameworks, Roles and Key Terms
    L.01.14
    Domain 1 Timed Quiz and Weak-Area Review
    L.01.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 2
    On the Exam

    Information Security Risk Management (20%)

    Emerging Risk and Threat Landscape Including AI and Supply Chain
    L.02.1
    Vulnerability and Control Deficiency Analysis Methods
    L.02.2
    Qualitative and Quantitative Risk Assessment and Analysis
    L.02.3
    Risk Appetite, Tolerance and Capacity Statements
    L.02.4
    Risk Treatment Options: Mitigate, Transfer, Accept, Avoid
    L.02.5
    Risk and Control Ownership Across Business Units
    L.02.6
    Risk Monitoring, Key Risk Indicators and Risk Reporting
    L.02.7
    Third-Party and Cloud Service Provider Risk Assessment
    L.02.8
    Case Study: Building and Maintaining a Risk Register
    L.02.9
    Calculating Annualized Loss Expectancy and Residual Risk
    L.02.10
    Selecting a Risk Treatment Within Appetite and Budget
    L.02.11
    Practice Questions: Risk Scenarios From the Manager’s Perspective
    L.02.12
    Integrating Risk Assessment Into Change and Project Management
    L.02.13
    Flashcards: Risk Terminology and Assessment Frameworks
    L.02.14
    Domain 2 Timed Quiz and Weak-Area Review
    L.02.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 3
    On the Exam

    Information Security Program (33%)

    Information Security Program Resources, Roadmap and Charter
    L.03.1
    Information Asset Identification, Classification and Ownership
    L.03.2
    Industry Standards and Frameworks: ISO/IEC 27002, NIST SP 800-53, CIS Controls
    L.03.3
    Policies, Standards, Procedures and Guidelines Hierarchy
    L.03.4
    Program Metrics, Key Performance Indicators and Key Goal Indicators
    L.03.5
    Control Design, Selection, Implementation and Integration
    L.03.6
    Control Testing, Evaluation and Continuous Monitoring
    L.03.7
    Awareness and Training, External Services Management and Reporting
    L.03.8
    Case Study: Integrating Security Controls Across Hybrid and SaaS Services
    L.03.9
    Writing a Security Metrics Dashboard for Senior Management
    L.03.10
    Managing Outsourced and Cloud Services With Contracts and SLAs
    L.03.11
    Identity, Segmentation and Control Layer Architecture for Managers
    L.03.12
    Practice Questions: Program Scenarios and Prioritization
    L.03.13
    Flashcards: Program Development and Management Terms
    L.03.14
    Domain 3 Timed Quiz and Weak-Area Review
    L.03.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 4
    On the Exam

    Incident Management (29%)

    Incident Response Plan Development and Team Structure
    L.04.1
    Business Impact Analysis: RTO, RPO and Maximum Tolerable Downtime
    L.04.2
    Business Continuity and Disaster Recovery Plan Alignment
    L.04.3
    Incident Classification, Categorization and Severity Levels
    L.04.4
    Incident Response Training, Tabletop Testing and Evaluation
    L.04.5
    Investigation Tools, Techniques and Evidence Handling
    L.04.6
    Containment Methods, Eradication and Recovery Procedures
    L.04.7
    Response Communications, Escalation and Post-Incident Review
    L.04.8
    Case Study: Managing a Ransomware Incident End to End
    L.04.9
    Deciding Containment Versus Business Continuity Trade-Offs
    L.04.10
    Regulatory Breach Notification Timelines and Stakeholder Communications
    L.04.11
    Lessons Learned and Updating the Incident Response Plan
    L.04.12
    Practice Questions: Incident Scenarios and Manager Decisions
    L.04.13
    Flashcards: Incident Management Terms and Metrics
    L.04.14
    Domain 4 Timed Quiz and Weak-Area Review
    L.04.15

    EXAM DOMAIN

    Self-Paced Topics: 8
    START HERE
    On the Exam

    Exam Prep

    Full-Length 150-Question Timed Practice Exam One
    L.prep.1
    Score Analysis by Domain and Targeted Weak-Area Review
    L.prep.2
    Full-Length 150-Question Timed Practice Exam Two
    L.prep.3
    Thinking Like the Manager: Eliminating Technical Distractors
    L.prep.4
    Scheduling Your CISM Exam Through ISACA and PSI
    L.prep.5
    Choosing Between the 2022 and November 3, 2026 Outlines
    L.prep.6
    Exam-Day Logistics, Identification and Time Management
    L.prep.7
    Applying for Certification and Maintaining CPE Credits
    L.prep.8
    COURSE PROGRESS Domain 0 of 5
    DoD Cyber Workforce Framework

    All the CISM Knowledge. Half the Time to Certification.

    Experience accelerated learning to get upskilled, CISM certified, and back to work. Fast.

    # CISMExam # SelfPacedBundle # SecurityManagement # CyberLeadership # CertificationPrep # CISMTraining # SecurityGovernance # ContinuousLearning # ITCompliance # RiskAssessment # SelfPaced # Training # SecurityManagement # OnlineLearning # StrategicPlanning # RiskManagement # DataPrivacy # Governance # SecurityBestPractices # GovernanceStrategy # CISMExam # SelfPacedBundle # SecurityManagement # CyberLeadership # CertificationPrep # CISMTraining # SecurityGovernance # ContinuousLearning # ITCompliance # RiskAssessment # SelfPaced # Training # SecurityManagement # OnlineLearning # StrategicPlanning # RiskManagement # DataPrivacy # Governance # SecurityBestPractices # GovernanceStrategy
    # ISACA # Certification # CISM # SecurityLeadership # SelfPacedLearning # CyberSecurity # CertificationPrep # Compliance # InfoSec # ISACAOfficial # ITSecurity # SelfStudy # ProfessionalDevelopment # EnterpriseGovernance # GovernanceExpert # DataProtection # CareerAdvancement # ITAudit # CareerGrowth # ComplianceTraining # ISACA # Certification # CISM # SecurityLeadership # SelfPacedLearning # CyberSecurity # CertificationPrep # Compliance # InfoSec # ISACAOfficial # ITSecurity # SelfStudy # ProfessionalDevelopment # EnterpriseGovernance # GovernanceExpert # DataProtection # CareerAdvancement # ITAudit # CareerGrowth # ComplianceTraining
    DoD 8140 Requirements

    Beyond the Cert: Built for the Job

    Foundational qualification The certification you earn with us
    Residential qualification Hands-on labs prep you for the on-the-job readiness DoD 8140 requires within 12 months
    Continuous professional development CPE-eligible training to maintain qualification long after

    The credential, the capability, and the continued readiness — all in one boot camp.

    FREQUENTLY ASKED QUESTIONS

    ISACA Official CISM
    Self-Paced FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    Most people need 40 to 60 hours of study depending on their background, spread across two to three months of evenings. You get 365 days of access, which is deliberately generous so a busy stretch at work does not cost you the course.

    Video lectures, interactive practice labs, the official ISACA CISM Review Manual, practice exam questions, downloadable study guides, flashcards, and access to our online community forum where you can ask questions and compare notes with other candidates.

    IT professionals, security managers, and practitioners heading for CISM who prefer to study on their own schedule. It suits people balancing work and family commitments who need months rather than a week, and people who have already done some of the reading and want structure around it.

    For anyone moving from doing security to managing it, yes. CISM is the credential that signals you can own a program rather than operate a tool, and it appears by name on security manager and director postings. Most CISM holders currently earn between about $148,000 and $192,000 in the United States, though information security manager titles specifically average closer to $130,000, and the spread tracks scope and seniority more than the certification itself.

    Yes, and it catches people out. ISACA requires five years of information security work experience with at least three years in security management across the CISM domains. You can sit the exam before you meet it and have five years to satisfy it, but the certification is not issued until you do. Some waivers apply for other credentials and degrees.

    Four domains: information security governance, information security risk management, information security program development and management, and incident management. Under the ISACA outline effective November 3, 2026, they are weighted 18%, 20%, 33% and 29%. The exam is management-oriented throughout. Technically strong candidates most often fail by picking the best technical answer rather than the answer a security manager accountable to a board would give.

    Yes, the CISM exam voucher is included with the self-paced bundle. ISACA exam registration also requires an ISACA account, and you schedule the exam with PSI when you are ready.

    Yes. Our Success Guarantee lets you apply 100% of your self-paced course investment toward any of our live CISM training classes within 30 days of your initial purchase. Contact the enrollment team and they will handle the transfer and help you pick a date. Self-paced itself does not include an exam retake.

    Choose self-paced if your schedule is unpredictable, you already have management exposure, and you are disciplined about study. Choose the live boot camp if you want a fixed end date, an instructor to argue the scenario questions with, and the exam booked at the end. The honest failure mode of self-paced is that it never quite finishes, which is why we let you move your money to a live class.

    Get the Free
    CISM Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    On-demand CISM
    Resources

    Our resource center features expert-written articles covering emerging security management trends, regulatory compliance updates, and practical implementation strategies

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Student Success Stories

    What Our Students Say

    Join thousands of certified professionals who trained with Training Camp

    ★★★★★

    Training Camp was great, really went above and beyond to support my CISA learning and development.

    KZ
    Kar** Zem**
    ★★★★★

    This exam frightens me to the point of not wanting to sit through it again. I will report that the Training Camp bootcamp was far better than any other I’...

    HN
    Har** New**** C**
    ★★★★★

    Training Camp absolutely nailed the teaching method for passing the certification exam.

    MO
    Mar** O
    ★★★★★

    Training Camp is an incredible organization with dedicated professional instructors who ensure the class is engaged in the learning experience. The venue is perf...

    Free practice test

    Not sure you are ready for the CISM exam yet?

    Our free CISM practice test runs 50 questions on a 80-minute timer, with an explanation for every answer choice, not just the right one. Short on time? Take the 25-question quick version instead.

    Start the CISM test
    Continue Your Journey

    CISM (Self-Paced) Related Courses

    Advance your career with these recommended certifications

    Featured on