CISM exam format: domains, weightings and length
CISM is examined across 4 domains. The weightings below decide how much of the exam each domain is worth — and therefore where preparation time pays off.
Domains and weightings
| Domain | Exam weight | Our questions |
|---|---|---|
| Information Security Program | 33% | 124 |
| Incident Management | 30% | 118 |
| Information Security Risk Management | 20% | 124 |
| Information Security Governance | 17% | 131 |
Length and number of questions
- Time: 240 minutes
- Questions: 150
- Passing score: 450 on a scale of 200–800 — what CISM needs to pass →
All 497 CISM practice questions, every option explained →
Know which domain is costing you marks
The weightings tell you what the exam rewards. A readiness check tells you where you stand in each one.
Test your CISM readiness — freeMore on CISM
Domain weightings as published by the exam vendor · Question counts are from the Certsqill CISM bank (497 questions).
