CISM exam format: domains, weightings and length
CISM is examined across 4 domains. The weightings below decide how much of the exam each domain is worth — and therefore where preparation time pays off.
Domains and weightings
| Domain | Exam weight | Our questions |
|---|---|---|
| Information Security Program | 33% | 528 |
| Incident Management | 30% | 480 |
| Information Security Risk Management | 20% | 320 |
| Information Security Governance | 17% | 272 |
Length and number of questions
- Time: 240 minutes
- Questions: 150
- Passing score: 450 on a scale of 200–800 — what CISM needs to pass →
All 1,600 CISM practice questions, every option explained →
Know which domain is costing you marks
The weightings tell you what the exam rewards. A readiness check tells you where you stand in each one.
Test your CISM readiness — freeMore on CISM
- CISM certification: requirements, cost and exam format →
- CISM passing score →
- CISM exam cost →
- CISM practice questions by domain →
Domain weightings as published by the exam vendor · Question counts are from the Certsqill CISM bank (1,600 questions).
