The CISM exam costs $760, or $575 if you’re an ISACA member. After you pass, you pay a one-time $50 application fee. That puts your minimum outlay at $810 as a non-member, or $770 as a new member once you add the $145 membership.
Exam fees are only the start. ISACA also charges a yearly maintenance fee of $45 for members or $85 for non-members. Most candidates buy study materials too. This guide covers every fee ISACA publishes, so you can plan the full cost of the credential.
The CISM exam fee for ISACA members
or $760 for non-members, plus a $50 application fee
How Much Does Each CISM Fee Cost?
ISACA, the association that awards CISM, sets every official fee. Two of them depend on whether you’re a member: the exam fee and the yearly maintenance fee. The table below lists them side by side.
Fees
CISM Fees for Members and Non-Members
| Fee | ISACA member | Non-member | When you pay it |
|---|---|---|---|
| Exam registration | $575 | $760 | When you register for the exam |
| Application processing | $50 | $50 | Once, when you apply after passing |
| ISACA Professional membership | $145 a year, plus chapter dues | Not applicable | When you join, then every year |
| Annual maintenance | $45 | $85 | Every year you hold CISM |
| Exam rescore request | $75 | $75 | Only if you ask for a rescore |
| Reinstatement | $50 | $50 | Only if your certification is revoked |
ISACA’s published fees in US dollars, checked Oct 5, 2026. Chapter dues vary by location. Full references in the Sources section.
You don’t pay the application fee when you sit the exam. It comes later, when you submit proof of your work experience. You have five years from your passing date to send that application.
Is ISACA Membership Worth It for the Exam Discount?
For most candidates, joining ISACA pays for itself. Membership cuts $185 off the exam fee and $40 a year off maintenance. Since a Professional membership costs $145 a year plus local chapter dues, you usually come out ahead from year one.
- Professional membership: $145 a year, plus chapter dues
- Recent Graduate membership: $68 a year, plus chapter dues, for those who graduated within the last two years
- Student membership: $25 a year, plus chapter dues, for first-time ISACA members
Membership brings other savings too. ISACA says members save 20% or more on certification exam prep. Members also get more than 70 free CPE credits, which helps once you need to keep CISM current.
What Does CISM Exam Prep Cost?
ISACA sells its own CISM prep materials, and members pay less for each one. Prices vary by format and membership status, so check ISACA’s store before you buy. These are the main official options:
- CISM Review Manual: the official reference guide, in print or digital form
- CISM Questions, Answers & Explanations Database: a six-month subscription to a pool of 1,047 practice questions
- CISM Online Review Course: a self-paced course that covers all four exam domains
- Free CISM practice quiz: 10 sample questions to test your starting point
- Online study groups: free for ISACA members through ISACA’s Engage community
ISACA updated the CISM exam content outline, and the new exam starts on Nov 3, 2026. If you test on or after that date, buy the updated prep materials that ISACA released on Sept 1, 2026.
Prep spending is the most flexible part of the budget. Some candidates pass with the review manual and practice questions alone. Others add a course or a tutor to work through the domains they find hardest.
What Is CISM Certification?
The Certified Information Security Manager (CISM) credential shows that you can build and run an enterprise information security program. ISACA, formerly the Information Systems Audit and Control Association, launched it in 2002. More than 111,000 professionals have earned it since.
CISM focuses on the management side of security rather than hands-on technical work. That makes it a natural step for professionals moving into leadership roles.
The CISM equips you with the strategic vision to architect a robust security program. Think of it as graduating from patching the roof to building the entire house.
Chidambaram Narayanan, CISA, writing on ISACA’s blog
What’s on the CISM Exam?
The CISM exam has 150 multiple-choice questions, and you get four hours to finish. Scores run on a scale of 200 to 800, and you need 450 or higher to pass. You can test at a PSI testing center or online with a remote proctor.
The questions cover four job practice domains. The chart below shows how much of the exam each one represents under the current outline.
The weights shift slightly on Nov 3, 2026, when the updated exam begins. The four domains stay the same, and ISACA adds enterprise and information security architecture content.
Domains
CISM Exam Domain Weights
| Job practice domain | Until Nov 2, 2026 | From Nov 3, 2026 |
|---|---|---|
| Information Security Governance | 17% | 18% |
| Information Security Risk Management | 20% | 20% |
| Information Security Program | 33% | 33% |
| Incident Management | 30% | 29% |
Source: ISACA’s CISM Exam Content Outline and its September 2026 announcement of the updated outline, checked Oct 5, 2026.
CISM Certification Requirements
Passing the exam is only one step. To earn the CISM credential, you must:
- Pass the CISM exam with a scaled score of 450 or higher.
- Apply within five years of your passing date and pay the $50 application fee.
- Show five years of experience in information security management, covering at least three of the four domains.
- Gain that experience within the 10 years before your application date.
- Follow ISACA’s Code of Professional Ethics and its continuing education policy.
Some candidates can shorten the experience requirement. ISACA accepts certain degrees and certifications in place of up to two years of experience. Check ISACA’s list of substitutions before you apply.
Is the CISM Cert Worth It?
For security professionals moving into management, CISM is often worth the cost. ISACA reports an average annual salary of more than $149,000 for CISM holders. Your own pay will depend on your role, location, and experience.
CISM suits people who plan, govern, and lead security work. Common roles for CISM holders include:
- Chief Information Security Officer (CISO)
- Information Systems Security Manager (ISSM)
- Information System Security Officer (ISSO)
- Information security governance specialist
- Risk management analyst
- Security architect
Your employer may also help with the cost. Many employers reimburse certification fees, so ask your manager or HR team before you pay. That can cut your own spending down to study time.
What Does It Cost to Keep CISM Active?
Keeping CISM active costs $45 a year for ISACA members or $85 a year for non-members. You also need to keep learning. ISACA sets these ongoing requirements for every CISM holder:
- Pay the annual maintenance fee of $45 for members or $85 for non-members.
- Earn at least 20 CPE hours each year and 120 hours over each three-year period.
- Follow the Code of Professional Ethics and respond if you’re chosen for the annual CPE audit.
Holding several ISACA credentials lowers the cost. From your third certification on, maintenance drops to $25 for members or $50 for non-members per extra credential. If CISM is revoked, reinstatement costs $50 plus any unpaid maintenance fees.
Tips for CISM Exam Success
Passing on your first attempt is the simplest way to keep your total cost down. These habits help most candidates prepare well:
- Start with the official materials: use the CISM Review Manual as your main study resource.
- Take practice exams: practice questions show you the exam style and reveal gaps in your knowledge.
- Work with a CISM tutor: a qualified tutor can tailor lessons to your weak domains and goals.
- Join a study group: other candidates bring motivation and fresh perspectives on hard topics.
- Set a study schedule: steady weekly study beats last-minute cramming.
- Focus on weak areas: after each practice test, spend more time on your lowest-scoring domains.
- Think like a manager: CISM questions usually reward the business view over the technical fix.
Sources
- "CISM Certification: Certified Information Security Manager," ISACA. Available at: https://www.isaca.org/credentialing/cism. Accessed 5 Oct. 2026.
- "Earn a CISM Certification," ISACA. Available at: https://www.isaca.org/credentialing/cism/get-cism-certified. Accessed 5 Oct. 2026.
- "CISM Exam Content Outline," ISACA. Available at: https://www.isaca.org/credentialing/cism/cism-exam-content-outline. Accessed 5 Oct. 2026.
- "ISACA Updates CISM Exam Content Outline, Factoring in Today’s Technologies, Security Responsibilities," ISACA, 10 Sept. 2026. Available at: https://www.isaca.org/about-us/newsroom/press-releases/2026/isaca-updates-cism-exam-content-outline-factoring-in-todays-technologies-security-responsibilities. Accessed 5 Oct. 2026.
- "Maintain CISM Certification," ISACA. Available at: https://www.isaca.org/credentialing/cism/maintain-cism-certification. Accessed 5 Oct. 2026.
- "Become an ISACA Member," ISACA. Available at: https://www.isaca.org/membership/become-a-member. Accessed 5 Oct. 2026.
- "ISACA Certification Exam Candidate Guide, Version 1.26," ISACA. Available at: https://www.isaca.org/credentialing/-/media/fa494652c5f149289af38cef18328650.ashx. Accessed 5 Oct. 2026.
- "Certification Application: What Are the Requirements to Become CISM Certified?," ISACA Support. Available at: https://support.isaca.org/s/article/What-are-the-requirements-to-become-CISM-certified. Accessed 5 Oct. 2026.
- "Don’t Let Excuses Hold You Back: Ten Reasons Why the CISM Certification Is Worth the Effort," Chidambaram Narayanan, ISACA Now Blog, 23 Jan. 2025. Available at: https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2025/ten-reasons-why-the-cism-certification-is-worth-the-effort. Accessed 5 Oct. 2026.
Summarize with AI:
Did you like this article? Leave a rating!
Loading...
