Learning experience

       

Flexible Learning Options Built for Working Professionals

       

Choose from self-paced, live online or in-house corporate CISM training so you can learn without interrupting your work commitments.

     

     

       

         

Mode of training

         

Self Paced, Live Online or In-house

         

               

  • Live instructor-led virtual classes with interactive discussions.
  •            

  • Self-paced access to recorded videos via EduDelphi’s LMS.
  •            

  • Customised in-house or one-to-one corporate batches on request.
  •          

       

       

         

Course duration

         

30–40 hours over a few weeks

         

               

  • Approximately 30–40 hours of expert-led CISM training.
  •            

  • Revision classes and mock tests scheduled near your exam date.
  •            

  • 24/7 access to LMS recordings and question banks for flexible revision.
  •          

       

       

         

Upcoming batches

         

Choose the schedule that suits you

         

               

  • Weekend batch: designed for working professionals.
  •            

  • Weekday evening batch: for those who prefer shorter, more frequent sessions.
  •            

  • Fast-track or revision bootcamp before your targeted exam window.
  •          

         

            Request Latest Batch Schedule
         

       

     

   

 

   

     

       

Why take this course

       

How CISM Course Accelerates Your Career

       

This CISM Course bridges the gap between technical cybersecurity skills and high-impact management roles, combining exam-focused preparation with strategic governance and risk capabilities.

     

     

       

         

Career impact

         

Move into high-growth roles

         

Position yourself for roles like Information Security Manager, Cybersecurity Manager and CISO-track leadership positions in global markets.

         

               

  • Management-focused, ISACA-aligned curriculum.
  •            

  • Clear mapping to governance, risk and compliance roles.
  •          

       

       

         

Practical learning

         

Learn by doing, not just listening

         

Blend live classes, self-paced content, exam success slides and intensive practice questions so you are ready for both the CISM exam and real-world security management.

         

               

  • Exam-style domain-wise practice and full-length mock tests.
  •            

  • Case discussions on governance, risk and incident scenarios.
  •          

       

       

         

Support

         

Guidance at every step

         

Get 24/7 LMS access, revision classes before the exam, and ongoing trainer support to minimise exam anxiety and maximise your chances of passing on the next attempt.

         

               

  • 1:1 doubt clearing and mentoring when needed.
  •            

  • Structured study plans and exam strategy support.
  •          

       

     

     

        View Career Outcomes
        Talk to a Programme Advisor
     

   

 

   

     

       

         

           

Course Overview

           

CISM Course for Strategic Security Leadership

           

Our CISM Course in  is designed for professionals who want to move from technical cybersecurity roles into strategic, managerial and leadership positions, building capabilities in governance, risk management, security programme development and incident management.

         

         

           

By the end of this course, you will be able to

           

                 

  • Design and oversee an enterprise information security programme aligned with business objectives and regulatory requirements.
  •              

  • Prepare for and clear the official ISACA CISM exam with structured, domain-wise coaching and mock tests.
  •              

  • Demonstrate to employers that you can lead information security at a strategic, management level.
  •            

         

         

            View Full Curriculum
            Get Course Brochure
         

       

       

         

           

Course Snapshot

           

             

                   

  • Mode: Self Paced, Live Online and In-house corporate training
  •                

  • Level: Intermediate to Advanced information security management
  •                

  • Ideal for: Security managers, auditors, consultants, system engineers and aspiring CISOs
  •                

  • Certification Body: ISACA
  •              

           

           

             

Upcoming Batches

             

                Weekend batch (Working professionals)
                Weekday evening batch
                Fast-track / Exam crash batch
             

           

         

       

     

   

 

   

     

       

         

           

Is this for you?

           

Who Should Take This Course

           

Our CISM Course is ideal for information security and IT professionals moving into governance, risk and security management roles.

         

         

               

  • Security consultants, managers, auditors, architects and system engineers.
  •            

  • IS / IT Security Professionals aiming for leadership and management roles.
  •            

  • IS / IT Managers, IT Directors and technology governance leaders.
  •            

  • IS / IT Auditors and IS / IT Audit Managers responsible for controls and assurance.
  •            

  • IS / IT Consultants responsible for security governance and risk advisory.
  •            

  • Security Auditors, Security Architects and senior security specialists.
  •            

  • Security System Engineers transitioning from hands-on technical work into management.
  •            

  • Chief Information Security Officers (CISOs) and aspiring CISOs.
  •            

  • IT professionals reporting to directors and senior management who need governance skills.
  •            

  • Professionals switching into cybersecurity who want to focus quickly on management and governance roles.
  •          

       

       

         

           

Eligibility & prerequisites

           

CISM exam eligibility is set by ISACA, and certification requires both exam success and relevant information security management experience.

           

                 

  • Exam openness: The CISM examination is open to all individuals interested in information security management.
  •              

  • Core requirements: Pass the CISM exam, adhere to ISACA’s Code of Professional Ethics and submit your certification application within 5 years.
  •              

  • Work experience: Minimum 5 years of professional information security management work experience within the 10 years preceding your application, with up to 2 years of approved waivers.
  •            

           

If you are unsure about your eligibility or applicable experience waivers, contact us for a personalised profile assessment before you register.

         

       

       

     

   

   

     

       

Curriculum

       

What You’ll Learn in CISM Course

       

Comprehensive coverage of CISM Course topics and exam domains.

     

     

       

         

           

             

               

                  Module 1
                  Information Security Governance (17%)
                 
               

                +
             

             

               

                     

  • A–ENTERPRISE GOVERNANCE
  •                  

  • Organizational Culture
  •                  

  • Legal, Regulatory and Contractual Requirements
  •                  

  • Organizational Structures, Roles and Responsibilities
  •                  

  • B–INFORMATION SECURITY STRATEGY
  •                  

  • Information Security Strategy Development
  •                  

  • Information Governance Frameworks and Standards
  •                  

  • Strategic Planning (e.g., Budgets, Resources, Business Case)
  •                

             

           

           

             

               

                  Module 2
                  Information Security Risk Management (20%)
                 
               

                +
             

             

               

                     

  • A–INFORMATION SECURITY RISK ASSESSMENT
  •                  

  • Emerging Risk and Threat Landscape
  •                  

  • Vulnerability and Control Deficiency Analysis
  •                  

  • Risk Assessment and Analysis
  •                  

  • B–INFORMATION SECURITY RISK RESPONSE
  •                  

  • Risk Treatment / Risk Response Options
  •                  

  • Risk and Control Ownership
  •                  

  • Risk Monitoring and Reporting
  •                

             

           

           

             

               

                  Module 3
                  Information Security Program (33%)
                 
               

                +
             

             

               

                     

  • A–INFORMATION SECURITY PROGRAM DEVELOPMENT
  •                  

  • Information Security Program Resources (e.g., People, Tools, Technologies)
  •                  

  • Information Asset Identification and Classification
  •                  

  • Industry Standards and Frameworks for Information Security
  •                  

  • Information Security Policies, Procedures and Guidelines
  •                  

  • Information Security Program Metrics
  •                  

  • B–INFORMATION SECURITY PROGRAM MANAGEMENT
  •                  

  • Information Security Control Design and Selection
  •                  

  • Information Security Control Implementation and Integrations
  •                  

  • Information Security Control Testing and Evaluation
  •                  

  • Information Security Awareness and Training
  •                  

  • Management of External Services (Providers, Suppliers, Third Parties, Fourth Parties)
  •                  

  • Information Security Program Communications and Reporting
  •                

             

           

           

             

               

                  Module 4
                  Incident Management (30%)
                 
               

                +
             

             

               

                     

  • A–INCIDENT MANAGEMENT READINESS
  •                  

  • Incident Response Plan
  •                  

  • Business Impact Analysis (BIA)
  •                  

  • Business Continuity Plan (BCP)
  •                  

  • Disaster Recovery Plan (DRP)
  •                  

  • Incident Classification/Categorization
  •                  

  • Incident Management Training, Testing and Evaluation
  •                  

  • B–INCIDENT MANAGEMENT OPERATIONS
  •                  

  • Incident Management Tools and Techniques
  •                  

  • Incident Investigation and Evaluation
  •                  

  • Incident Containment Methods
  •                  

  • Incident Response Communications (Reporting, Notification, Escalation)
  •                  

  • Incident Eradication and Recovery
  •                  

  • Post-Incident Review Practices
  •                

             

           

         

         

In addition to the four domains, the course includes exam success slides summarising each domain, practice questions after every module and full-length mock tests that simulate the real CISM exam.

       

       

         

           

Learning outcomes by module

           

                 

  • Relate each CISM domain to specific governance, risk, programme and incident management competencies.
  •              

  • Understand domain weightages so you can allocate your study time strategically.
  •              

  • Reinforce learning with domain-wise questions, mock exams and revision slides.
  •            

         

         

           

Download full syllabus

           

Get the complete, updated CISM Course syllabus with domain-wise topics, exam weightage and a recommended study plan.

           

              Download Detailed Syllabus
           

         

       

     

   

 

   

     

       

Exam & certification

       

How the CISM Certification Exam Works

       

Understand the official ISACA CISM exam format, scoring and scheduling so you can plan your preparation with confidence.

     

     

       

         

           

Exam pattern

           

                 

  • Exam type: Computer-based, multiple-choice questions (MCQs).
  •              

  • Duration: 240 minutes (4 hours) of continuous testing time.
  •              

  • Number of questions: 150 MCQs covering the four CISM domains.
  •              

  • Scoring: Scaled score from 200–800 with a passing score of 450.
  •            

         

         

           

Exam windows & attempts

           

                 

  • Exam eligibility is valid for 365 days from registration with ISACA.
  •              

  • You can schedule your exam on any available date, time and location within this window.
  •              

  • ISACA offers both remote proctored online exams and in-person testing centres.
  •              

  • Rescheduling is allowed within the eligibility period, typically more than 48 hours before your appointment.
  •            

         

       

       

         

           

Certification & recognition

           

Upon successfully clearing the exam and meeting experience requirements, you will be awarded the Certified Information Security Manager (CISM) credential from ISACA.

           

                 

  • Issued by: ISACA, a globally recognised information systems association.
  •              

  • Recognised in: Worldwide, especially valued in management-level security roles.
  •              

  • Validity: Requires ongoing Continuing Professional Education (CPE) and adherence to ISACA’s Code of Professional Ethics.
  •            

           

Please refer to ISACA’s official website for the latest CISM exam dates, fees and policies. Our team will guide you through registration and scheduling.

         

       

     

   

 

 

   

     

       

Fees & inclusions

       

CISM Course Fees in

       

Transparent pricing for CISM Course packages in .

     

     

       

         

           

What your fee includes

           

                 

  • Complete CISM Course training via live online or in-house corporate batches, plus self-paced recordings where applicable.
  •              

  • 30+ hours of recorded videos for flexible self-paced learning alongside live sessions.
  •              

  • Access to EduDelphi’s cloud-based e-learning portal with exam success slides and domain-wise practice questions.
  •              

  • Mock tests and a dedicated revision class before your targeted CISM exam.
  •              

  • 24/7 learner support, doubt-clearing, career guidance and placement assistance.
  •            

            EMI & instalment options available
           

For corporate and group enrolments, custom pricing and in-house training options are available.

         

       

       

         

           

ISACA CISM exam fees (payable to ISACA)

           

ISACA’s current CISM exam fees are typically around USD 575 for members and USD 760 for non-members, excluding membership costs.

           

              Calculate My Total Course Cost
              View Official Exam Fees
           

           

Contact us for the latest CISM Course training fee structure, country-specific offers and convenient installment or EMI plans tailored to your needs.

         

       

     

   

 

 

   

     

       

Meet your mentors

       

Learn from Certified, Practicing Professionals

       

Learn from a CISM-certified expert with multi-domain industry experience, global certifications and a strong record of mentoring professionals to exam success.

     

     

       

         

           

Kashif Akhtar - Trainer

         

         

           

Kashif Akhtar

           

Qualified Engineer, CSCP, PMP, CISA, CISM, CRISC, CDPSE

           

Kashif Akhtar is a seasoned CISM-certified professional with hands-on experience across engineering, supply chain, contracts management and ERP tools, bringing deep knowledge of information security governance and ISACA frameworks to the classroom.

            View full trainer profile →