Preparing For The CISM Exam
Preparing For The CISM Exam
Passing the CISM exam can be achieved through an organized plan of study. To assist individuals with the development of a
successful study plan, ISACA offers study aids and review courses to exam candidates (see www.isaca.org/cismbooks for more
details). Order early: The delivery time can be one to two weeks depending on geographic location and custom clearance
practices. For current shipping information see www.isaca.org/shipping.
■ Candidate’s Guide to the CISM ® Exam is supplied to individuals upon receipt of the CISM exam registration form and payment.
This guide provides general information regarding the administration of the exam as well as a detailed outline of the job
practice areas, task statements and knowledge statements covered on the exam and a sample copy of the admission ticket and
exam answer sheet.
■ CISM® Review Manual 2008 has been completely revised and updated with new content to improve clarity and to remain
current in a dynamic field. The updated manual reflects the fact that the information security management profession is rapidly
evolving, with increasing responsibilities, scope and authority. Topics covered include governance and management, strategy
and policy, security architecture and metrics, and the alignment of security activities with, and in support of, overall business
objectives. The new edition also features definitions of terms most commonly found on the exam, practice questions similar in
content to what has previously appeared on the exam and references to additional study materials on specific topics. The CISM
Review Manual 2008 is designed to assist candidates in preparing for the CISM exam, and for individuals wanting to learn
more about the roles and responsibilities of an information security manager. The manual can be used as a stand-alone
document for individual study or as a guide or reference for study groups and chapters conducting local review courses.
■ CISM® Review Questions, Answers & Explanations Manual 2008 consists of 350 multiple-choice study questions that have
previously appeared in the CISM Review Questions, Answers & Explanations Manual 2007 and the 2007 Supplement. Many
questions have been revised or completely rewritten to recognize a change in job practice, be more representative of the
current CISM exam question format, and/or to provide further clarity or explanation of the suggested correct answer. These
questions are not actual exam items, but are intended to provide the CISM candidate with an understanding of the type and
structure of questions and content that have previously appeared on the exam. This publication is ideal to use in conjunction
with the CISM Review Manual 2008.
To assist the user in maximizing their study efforts, questions are presented in the following two ways:
• Sorted by job practice area
• Scrambled as a sample 200-question exam
■ CISM® Review Questions, Answers & Explanations Manual 2008 Supplement is recommended for use when preparing for the
2008 CISM exam. This edition consists of 100 new sample questions, answers and explanations based on the current CISM job
practice areas, using a similar process for item development as is used to develop actual exam items. The questions are
intended to provide the CISM candidate with an understanding of the type and structure of questions that have typically
appeared on past exams, and were prepared specifically for use in studying for the CISM exam.
■ CISM® Practice Question Database v8 combines the CISM Review Questions, Answers & Explanations Manual 2008 with the
CISM Review Questions, Answers & Explanations Manual 2008 Supplement into one comprehensive 450-question study
product. Sample exams with randomly selected questions can be taken and the results viewed by job practice area, allowing for
concentrated study one area at a time. Additionally, questions generated during a study session are sorted based upon the
user’s previous scoring history, allowing CISM candidates to easily and quickly identify their strengths and weaknesses, and
focus their study efforts accordingly. Other features allow the user to select sample exams by specific job practice areas, view
questions that were previously answered incorrectly and vary the length of their study sessions. Also included are Information
Systems Control Journal ® articles referenced in the CISM Review Manual 2008. The database is available in CD-ROM format or
as a web site download.
The CISM Practice Question Database v8 is licensed for installation on one computer only for personal, noncommercial use.
■ CISM review courses are conducted by many ISACA chapters. Exam candidates should contact their local ISACA chapter
to find out if a review course is being offered. These courses are often taught by current CISMs who present and discuss
exam topics and share their secrets of success. Information pertaining to chapter contacts and course offerings is available
at www.isaca.org/chapters and www.isaca.org/cismreview, respectively.
No representation or warranties assuring candidates’ passage of the exam are made by ISACA or the CISM Certification Board in regard to these or other
association publications or courses.