ISACA · Professional Certification · Expert
Certified Information Security Manager (CISM)
Crydd Score 66
Demand High
Career Value High
Recognition High
CISM at a glance
- Provider
- ISACA
- Credential type
- Professional Certification
- Exam required
- Yes
- Category
- Security
- Level
- Expert
- Cost
- See official page (member and non-member rates differ)
- Difficulty
- Advanced
- Time to earn
- 3–6 months (after meeting experience requirements)
- Validity
- 3 years (maintained with CPE credits)
- Format
- 150 questions, 4 hours
- Prerequisites
- 5 years of information security management experience
What is CISM?
ISACA's management-tier security credential. Where CISSP is broad and technical, CISM is deliberately about running a security programme — governance, risk, incident management, and the business side of protecting an organisation. It is a leadership certification, and it is priced and respected as one.
Skills it covers
- Security governance
- Risk management
- Incident management
- Program development
Is CISM worth it? The Crydd Verdict
CS 66Choose it if
You are moving from hands-on security into management, and you meet the five-year experience requirement. CISM is the credential that hiring managers map directly to security-leadership roles.
Consider alternatives if
You want to stay technical — CISSP or a hands-on offensive credential such as OSCP will serve you better — or you lack the required experience, which cannot be waived.
Why we say so
Rising regulatory pressure keeps security-management roles growing, and ISACA's credentials are treated as an authority in governance and audit functions, giving CISM strong recognition and compensation.
Market demand
Security-leadership roles have grown with regulatory and board-level attention to cyber risk, and CISM is one of the two credentials (with CISSP) that those manager and director postings name most consistently.
Where CISM takes you
- Security Manager
- Cybersecurity Analyst
- Security Architect
Career roadmaps show where this certification fits in each path. See the roadmaps.
Related certifications
Curated connections from the catalog — each labelled with how it relates to CISM, so you know why it’s here.
