Aurum
Download

CISM Certification

A route to ISACA's CISM: an honest experience check, a dated plan, study across governance, risk, the security programme and incident management, timed mocks, exam day and the certification application.

Free · Mac (Apple silicon) and Windows · v1.0.0 · Other platforms

Then open the Marketplace in the app, search for CISM Certification, and click Install. It goes into your own files, and works offline from then on.

What it installs.

1

Pillar

1

Area

50

Projects

200

Starter tasks

🏅 Tech & Engineering Certifications

CISM Certification

Studying for ISACA's CISM: information security governance, risk management, programme development and incident management, plus the experience to certify.

  1. CISM eligibility check against your work history
  2. Reading the current CISM exam content outline
  3. Mapping your own job to the four CISM domains
  4. Choosing between CISM, CISSP and CISA for your role
  5. ISACA membership and local chapter decision
  6. Official CISM review manual and question database
  7. Diagnostic practice set and baseline score by domain
  8. Dated CISM study plan worked back from the exam
  9. CISM study budget and employer funding request
  10. Weekly CISM study rhythm
  11. Daily question set from the CISM database
  12. Wrong-answer log and weekly review
  13. Monthly timed mock and domain score update
  14. Flashcards for ISACA vocabulary and frameworks
  15. Study group or chapter review check-ins
  16. Applying one CISM idea at work each week
  17. Monthly CISM plan reset
  18. CISM experience evidence log
  19. Quarterly check for ISACA job practice changes
  20. Security strategy aligned to the business
  21. Security policies, frameworks and metrics
  22. Risk assessment, appetite and treatment
  23. Practice risk register with owners and reporting
  24. Security programme resources, architecture and controls
  25. Third parties, awareness and control assurance
  26. Incident response plans, roles and readiness
  27. Incident, continuity and disaster recovery links
  28. Answering best, first and most questions like a manager
  29. Framework crosswalk for the CISM candidate
  30. Deciding on an instructor-led CISM review course
  31. Remote proctored or test centre exam decision
  32. Four-week fix for your weakest CISM domain
  33. Pacing strategy for the full CISM exam
  34. Book, delay or retake readiness decision
  35. Registering and booking the CISM exam
  36. Final fortnight before the CISM exam
  37. CISM exam day plan
  38. Next step after the CISM result
  39. Submitting the CISM certification application
  40. Showing the CISM credential on your CV and profile
  41. Studying for CISM while managing a team
  42. From security engineer to security manager through CISM
  43. CISM for auditors and risk professionals
  44. Running a sponsored CISM cohort for your team
  45. Passing CISM before the experience is complete
  46. New security lead's first 90 days using CISM thinking
  47. Keeping CISM current with CPE and the annual fee
  48. Board-level security report built on CISM principles
  49. Mentoring the next CISM candidates
  50. Next ISACA credential after CISM

Where it starts.

Each project arrives with its purpose, milestones and first tasks written out. Here is how the first three read.

CISM eligibility check against your work history

ISACA certifies only candidates who can show a set number of years of information security work, part of it in a management role across most of the job practice domains, inside a window around the exam date, with limited waivers for some other credentials and degrees.

First tasks

  • Open the CISM certification requirements page on the ISACA website
  • List every security role with start and end dates and team size
  • Mark which of the four domains each role covered in practice
  • Write a one-line eligibility verdict with a target certification date

Reading the current CISM exam content outline

Every question is built from ISACA's published job practice, which names the domains, their weightings and the task and knowledge statements behind every question, and it is revised every few years. Reading the live version, rather than a blog summary or an older course, means your study hours follow what is actually examined this year.

First tasks

  • Download the current CISM exam content outline from ISACA
  • Copy the domain weightings and exam format into your study plan
  • Turn each domain's task statements into a checklist
  • Check that your review materials match the outline's edition

Mapping your own job to the four CISM domains

Most candidates are strong in one or two domains from daily work and thin in the rest, often incident management for governance people or governance for operations people. Scoring your real exposure to each domain before studying shows where reading will be revision and where it will be new ground.

First tasks

  • Rate your hands-on exposure to each CISM domain from one to five
  • Write two work examples under each domain
  • Name the domain with the thinnest examples
  • Save the ratings beside the exam content checklist

Make it yours.

Install CISM Certification, then tell Aurum the date you're aiming for. It checks whether the plan fits the weeks you actually have.

Free · Mac (Apple silicon) and Windows · v1.0.0 · Other platforms

Blueprints are general information to help you organise your own work. They are not medical, financial, legal or other professional advice. See the Terms.