Useful security-management learning can support work without buying an exam. Taking the CISM exam and earning the credential are separate: course completion does not create required experience.
Use your intended exam date to choose materials. The outline changes November 3, 2026; class attendance in October does not establish which exam version you will take.
The issuer describes self-paced preparation covering key concepts across the four CISM domains, and its catalogue describes interactive activities. The public product response identifies the course but exposes no delivered syllabus, revision, price or access conditions. Confirm materials against your intended exam date. Lessons, permitted practice, feedback, completion evidence and personal access were not inspected.
The public description does not establish course admission or personal readiness. Sitting the exam and earning the certification are separate decisions; check the experience and application requirements.
Selected price and currency, dates, seats and practice access require confirmation in the source and owning guide.
The public credential page describes a six-month CISM Questions, Answers and Explanations subscription with a 1047-question pool, study planning and progress review.
The public credential page describes a six-month CISM Questions, Answers and Explanations subscription with a 1047-question pool, study planning and progress review. This is a publisher description, not an operated subscription or a promise about the selected edition. Price, delivered version, activation date, permitted access and feedback remain unknown. Confirm alignment to your intended exam date; questions and practice do not establish certification eligibility.
The public description does not establish course admission or personal readiness. Sitting the exam and earning the certification are separate decisions; check the experience and application requirements.
Selected practice-exam price and personal access require confirmation. Read the owning guide for purchase and access-window limits; a certification-exam fee is a separate item.
The public outline describes governance, risk, security-program and incident-management exam domains.
Exam scope is separate from instruction and permitted practice.
Read the description and decision limits
The public outline describes governance, risk, security-program and incident-management exam domains. It warns of the November 3, 2026 outline update. Exam scope is not a delivered teaching syllabus, permitted practice or personal readiness; verify the version for your intended exam date.
Inspect the owning guide and original outline for course entry requirements and recommended preparation. This summary does not establish personal admission.
This public exam outline is a scope reference, not purchased instruction or practice access. Exam registration, courses and permitted practice have separate costs.
Drafting a brief does not send it. A short request permits Learnerside to reply; provider sharing requires separate consent naming the recipient.
Course packages checked October 13, 2026
Compare CISM training and exam-date alignment
Use self-paced instruction for a flexible schedule or live teaching for a fixed calendar and instructor questions. The exam outline changes November 3, 2026: verify the exact courseware revision against your exam appointment. ISACA’s course page still warns about outgoing materials despite a link labelled “17th Edition”; current alignment remains unresolved. Read ISACA’s transition notice.
Compare what each package includes. Learning Tree lists a voucher; New Horizons and Global Knowledge price the exam separately. ISACA’s eligible member price has separate membership costs. Dated tuition and calendars do not establish your final total, personal access or a seat.
The checked US terms require employer sponsorship for Learning Tree and Global Knowledge. A public price does not establish eligibility to buy training personally.
4 dated options shown. Prices are in USD; check the date and package before using one in a budget.
Self-paced courses
ISACA
CISM - Certified Information Security Manager
$895 per course
CISM Online Review Course — LMS-CCM23 (nonmember)
Delivery
on demand
Exam
Inclusion to confirm
Buyer
Commercial
Observed
Standalone self-paced course, public nonmember USD 895; eligible member display USD 795 plus membership fees, membership eligibility required. Narrated modules, video, job aids, case activities and a practice exam advertised; approximately 16 hours is publisher seat time, not personal completion/contact hours. Six months of course access from purchase advertised. A link labelled 17th Edition leads to the same SKU, whose page retains an outgoing-materials/no-auto-upgrade warning; exact revision for an exam on/after November 3, 2026 is unresolved. No exam voucher, separate QAE database or manual is listed; confirm selected bundle and budget exam separately. Selected access, tax/refund and final total unconfirmed.
ISACA CISM with practice questions (QAE) — virtual learning
Delivery
virtual live
Exam
Separate purchase
Buyer
Commercial
Observed
US-locale USD 2,695 virtual-learning tuition excluding VAT; four catalogue days, with QAE access advertised for six months and described as up to six months after training. Confirm activation/deadline. Exam is explicitly excluded; its separate voucher is offered only to course attendees. November 2–5, 2026, 08:00–17:00 Eastern Standard Time is listed and straddles the issuer exam transition; class dates do not establish which exam outline applies. Seller marks course updated 9/2026, but delivered revision/alignment, seat, instructor/feedback, recordings, selected tax and cancellation terms remain unconfirmed. Checked US seller terms require employer-sponsored buyers; a public price does not establish self-funded enrollment eligibility.
CISM Certified Information Security Manager — 2036 (commercial)
Delivery
instructor led
Exam
Voucher listed — check conditions below
Buyer
Commercial
Observed
Four-day Live Instructor commercial tuition, with official curriculum, exam voucher and after-course coaching listed. Provider FAQ advertises six months of course/QAE access from redemption and exam within six months of voucher redemption; confirm the exact selected entitlement. Virtual/in-person calendar entries are not confirmed seats or contact-hour totals. Confirm delivered courseware revision against intended exam date: the issuer outline changes November 3, 2026. Selected schedule/year/timezone, instructor/feedback, tax, cancellations and retake terms remain unconfirmed; government eligibility/rates are separate. Checked US seller terms require employer-sponsored buyers; a public price does not establish self-funded enrollment eligibility.
Certified Information Security Manager (CISM) — 200005415
Delivery
virtual live
Exam
Separate purchase
Buyer
Commercial
Observed
Four-day virtual instructor-led tuition; provider explicitly excludes the exam voucher by default and offers a separate add-on without an established price here. January 25–28, 2027, 08:00–16:00 is listed with a CST label; confirm actual meeting timezone and seat. Exact courseware revision for the November 3, 2026 exam change, QAE/materials, practical exercises, feedback, recordings/access, tax and cancellations need confirmation. Course-entry recommendations do not establish eligibility to earn CISM.
Your exam date determines which CISM outline to study
CISM has 150 multiple-choice questions and a four-hour limit. Through November 2, 2026, the domains are Governance 17%, Risk Management 20%, Information Security Program 33%, and Incident Management 30%. Exams on or after November 3 use 18%, 20%, 33% and 29% and add current enterprise and information-security architecture responsibilities.
ISACA released updated preparation materials September 1 and warns that buying the outgoing materials does not grant access to the new materials. Ask the provider to put the intended exam date, exact courseware publication or revision and applicable outline in writing. Read ISACA’s outline-change announcement.
Exam access versus credential eligibility
Anyone may test; earning CISM requires verified management experience
ISACA lets anyone take the exam. Full certification requires at least five years of professional information-security management experience across at least three of the four CISM domains. The experience must fall within the ten years before application, and you must apply within five years after passing. ISACA’s current public requirements page does not summarize every possible experience substitution or waiver, so verify the current application instructions before budgeting on one. Check the certification requirements.
September 14 fee, maintenance and registration observations
The September 14 research recorded exam fees of USD 575 for ISACA members and USD 760 for nonmembers. Certification also requires a USD 50 application fee. Maintaining CISM requires at least 20 CPE hours each year and 120 over three years, plus an annual USD 45 member or USD 85 nonmember maintenance fee. Membership has its own cost, so compare the complete scenario rather than assuming the member exam rate is automatically cheaper. Check ISACA’s maintenance terms.
The September 14 research recorded continuous registration. ISACA stated eligibility lasts six months after registration, appointments may be booked as early as 48 hours after payment, only the next 90 days of appointments are displayed, and rescheduling is free when completed at least 48 hours before the appointment. Treat those as exam-planning rules, not proof that a training-provider date has a seat.
These observations are not a current quote or appointment. Reopen the official sources before payment.
Compare CISM, CISSP and SecurityX
Credential choice
CISM, CISSP and SecurityX prove different things
Choose CISM when
The requirement centers governance, security-program leadership, risk and incident management, and you can document ISACA’s management-experience path.
Choose CISSP when
The requirement values broad judgment across eight security domains and you can satisfy ISC2’s experience and endorsement rules, or deliberately use its Associate path.
Consider SecurityX when
The role is advanced practitioner work across architecture, engineering, operations and governance, without CISM’s or CISSP’s post-exam experience verification path.
Learnerside’s extraction of the current official DoD 8140 qualification matrix finds CISM as a foundational qualification option in 13 work-role and proficiency-level rows. It is one option, not a universal requirement or complete qualification. Resident qualification, continuing professional development and component or contract rules still apply.
Historical provider observations and purchase conditions
CISM training: match the course to the exam date and experience you can document
ISACA, Learning Tree and New Horizons pages checked September 14, 2026; Global Knowledge checked September 13. These are dated research observations, not confirmed seats, quotes or a provider ranking.
Compare the exam date, management experience and delivered course revision
CISM is changing on November 3, 2026. Compare the outline that applies on the intended exam date, the management experience required for certification, course pacing, exact materials, voucher, seller, delivery organization and policies.
Official baseline
Exam scope: CISM uses 150 multiple-choice questions in four hours. Through November 2, 2026, the four domains are Information Security Governance 17%, Information Security Risk Management 20%, Information Security Program 33%, and Incident Management 30%. For exams on or after November 3, 2026, ISACA changes the weights to 18%, 20%, 33% and 29% and adds current architecture responsibilities.
Training scope: ISACA released updated preparation materials on September 1, 2026 for the examination beginning November 3. ISACA also warns that buying the outgoing materials does not grant access to the new materials. A provider must therefore identify the intended exam date, exact courseware revision and outline - not merely say CISM.
How to use it: Anyone may take the exam, but full CISM certification requires five years of professional information-security management experience across at least three of the four domains. The experience must fall within the ten years before application, and the application must be made within five years after passing. ISACA's current public requirements page does not summarize every possible experience substitution or waiver; verify the current application instructions rather than budgeting on one.
Course: Course 2036, CISM training using official ISACA curriculum
Format and pace: Four live instructor-led days, online or in person. The checked page metadata publishes 20 complete future references through September 2027; all enter matching and are progressively disclosed on the page.
Published coverage:
four CISM domain families
official ISACA curriculum claim
exam voucher
after-course instructor coaching
Hands-on evidence: The page publishes four modules but does not establish learner-performed exercises, scenario-feedback criteria or a lab environment.
Readiness evidence: Learning Tree expects at least five years of information-security experience in relevant roles. Passing training or the exam still does not establish ISACA certification eligibility.
Likely fit: An employer-sponsored learner who values an included voucher and coaching and can verify the applicable November 2026 outline, current seat and buyer terms.
Archived provider calendar examples: These dates were observed when the source was checked; some have passed. They are not upcoming class cards, open seats, or a current quote. Use the training finder for its time-checked references, then verify dates and availability with the provider.
2026-09-15 through 2026-09-18 · USD 3,850 published tuition · America/New_York. Provider labels this virtual date Guaranteed to Run; seat availability remains unverified.
2026-09-22 through 2026-09-25 · USD 3,850 published tuition · America/New_York. Provider labels this virtual date Guaranteed to Run; seat availability remains unverified.
2026-10-13 through 2026-10-16 · USD 3,850 published tuition · America/New_York. Provider-published virtual date; run status and seat availability remain unverified.
17 additional dated observations are retained in the finder; passed or stale references cannot be added to a request.
Verify before approval:
outgoing versus November 3, 2026 courseware and intended exam date
current seat and final delivery format
voucher delivery, expiration and retake conditions
commercial buyer eligibility, seller, instructor, practical work and total
that the published US public-course cancellation, transfer and substitution terms control this exact Course 2036 purchase
Course: Provider course 200005415 / 3601668E, CISM virtual instructor-led training
Format and pace: Four-day virtual instructor-led course. The current page publishes every meeting date for October 2026, November 2026 and January 2027; all three references now enter matching.
Published coverage:
governance
risk management
information-security program
incident management
Hands-on evidence: The checked page publishes a domain outline but does not identify learner-performed exercises, labs, recordings or a feedback model.
Readiness evidence: The provider targets security and technology professionals; use ISACA five-year, three-domain certification requirement as the separate eligibility test.
Likely fit: A prepared learner who needs a lower published base fee and can verify the exact outline revision, optional voucher total and legal seller or franchise.
Archived provider calendar examples: These dates were observed when the source was checked; some have passed. They are not upcoming class cards, open seats, or a current quote. Use the training finder for its time-checked references, then verify dates and availability with the provider.
2026-10-05 through 2026-10-08 · USD 2,595 published tuition · Etc/GMT+6. Provider labels these dates Guaranteed to Run; that does not establish an available seat or immutable schedule.
2026-11-17 through 2026-11-20 · USD 2,595 published tuition · Etc/GMT+6. Provider labels these dates Guaranteed to Run; that does not establish an available seat or immutable schedule.
2027-01-25 through 2027-01-28 · USD 2,595 published tuition · Etc/GMT+6. Provider labels these dates Guaranteed to Run; that does not establish an available seat or immutable schedule.
Verify before approval:
November 2026 courseware revision and intended exam date
seat and source-labeled CST interpretation
optional exam voucher price and terms
legal seller or franchise, delivery organization, instructor, practical work and total
that the published US refund, reschedule, substitution and access-period terms control this exact CISM sale
Format and pace: Four live instructor-led days. The two complete displayed sessions were full, and one crosses the November 3 outline change.
Published coverage:
four CISM domain families
live instructor-led review
vendor-credit eligibility claim
Hands-on evidence: The checked pages do not establish an exact learner-performed exercise set, lab environment, feedback model or included voucher.
Readiness evidence: The offer targets experienced security professionals. Its overview contains retired exam facts, so the delivered readiness and course-version statements require correction.
Likely fit: Do not shortlist until Global Knowledge resolves the 200-question claim, retired domain weights, old DoD 8570 wording, outline-transition delivery and class availability.
Dated schedule: No exact calendar is linked in Learnerside’s retained observations. Ask for every meeting date, time and source time zone.
Verify before approval:
correct 150-question exam facts and current domain weights
courseware used before and after November 3, especially the November 2-5 class
seat because displayed classes were full
legal seller and Global Knowledge-versus-partner delivery identity
named vendor-credit program, voucher, exercises, total and cancellation terms
Evidence boundary: This comparison paraphrases public outlines; it does not republish a provider syllabus, verify a seat, or prove that every listed topic receives equal live instruction. A provider-issued proposal should identify the exact course version, schedule, delivery organization, inclusions and terms.
The November 3 outline change affects what you should buy now
The outgoing examination uses 17%, 20%, 33% and 30% domain weights through November 2, 2026. The updated examination uses 18%, 20%, 33% and 29% from November 3 and adds current architecture responsibilities. ISACA says updated preparation materials became available September 1 and that buying the outgoing materials does not grant the new materials. Put the intended exam date and delivered courseware revision in the quote.
Exam access and certification eligibility are different
Anyone may sit the CISM exam. Earning CISM requires five years of professional information-security management experience across at least three of four domains, with experience timing and application rules. Passing a three- or four-day course or the exam does not create that experience.
Twenty-three historical calendar observations support comparison questions
Learning Tree publishes 20 four-day references from September 2026 through September 2027 for a USD 3,850 package with an exam voucher and coaching. New Horizons publishes three USD 2,595 four-day virtual references in October and November 2026 and January 2027; its voucher is excluded by default and the add-on price is not shown. These are calendar and base-price observations, not seats or complete quotes.
Use the November transition as a hard matching constraint
Select materials for the intended exam date: tests through November 2 use the outgoing outline; tests from November 3 use the revised outline. An October class attendee may still need revised materials if testing later. The provider pages do not identify the delivered revision, so the match packet keeps courseware unresolved until the provider names it in writing.
Global Knowledge is held out until material conflicts are resolved
Global Knowledge lists four-day USD 2,695 offerings, but the two checked sessions were full and its November 2-5 class crosses the exam-outline change without explaining the delivered revision. Its September observation also said 200 questions, shows retired domain weights and uses old DoD 8570 wording. The provider must correct those conflicts before Learnerside treats the offer as a current match.
A short request is available immediately. Experience, schedule, delivery, budget and the detailed planner are optional context. Use the research or draft a private employer brief without sending learner information to a provider.