CISM
What does the CISM exam cover, on one page?
The CISM exam on one page: four domains and their weights, including the change ISACA makes on 3 November 2026. The mnemonic at the bottom gives you the four in order.
What does the CISM exam cover, on one page?
CISM exam: four domains
1 Information Security Governance
- 17% up to 2 Nov 2026
- 18% from 3 Nov 2026
2 Information Security Risk Management
- 20% up to 2 Nov 2026
- 20% from 3 Nov 2026
3 Information Security Program
- 33% up to 2 Nov 2026
- 33% from 3 Nov 2026
4 Incident Management
- 30% up to 2 Nov 2026
- 29% from 3 Nov 2026
Good Risk Programs Improve
- G Information Security Governance
- R Information Security Risk Management
- P Information Security Program
- I Incident Management
CISM mind map
Embed it on your site, wiki or study group page:
<a href="https://credentialpress.com/guides/cism-mind-map"><img src="https://credentialpress.com/img/mindmaps/cism.png" alt="CISM mind map" width="1600" height="1131"></a>
How do you use the mind map?
Print the PDF and pin it where you study, or open the Markdown in Obsidian (a mind map plugin draws it from the headings). Say the mnemonic until you can list the domains in order, then add one item from memory under each branch.
Where next?
Also free: the CISM interview questions, plus every other credential on our study tools page. For the full syllabus, the CISM Exam Guide and the CISM Practice Questions go domain by domain.
Frequently asked questions
What are the CISM exam domains?
1 Information Security Governance; 2 Information Security Risk Management; 3 Information Security Program; 4 Incident Management.
Is there a mnemonic for the CISM domains?
Good Risk Programs Improve: G for Information Security Governance, R for Information Security Risk Management, P for Information Security Program, I for Incident Management.
Can I use the CISM mind map in Obsidian?
Yes. Download the Markdown file and open it in Obsidian; a mind map plugin draws it from the headings. A printable PDF and a PNG are free too.
Which books go deeper on CISM?
Certified Information Security Manager. 12 chapters, 342 pages.
Practice questions with full rationales, sized to the published domain weights. 213 pages.
Sources
Credential Press is independent of ISACA.