Prepare for the Certified Information Security Manager (CISM) certification by ISACA with free exam-style practice questions on CyberCertPrep. The CISM exam has 150 questions, a time limit of CISM hours, and a passing score of 65%.
Choose from Practice mode, Exam Simulation, Weak Areas review, and Daily Challenge. Track your progress with detailed analytics and study with flashcards.
Certified Information Security Manager (CISM) Exam Domain
Focus your study on this domain with targeted practice questions. This domain accounts for 12% of your CISM exam score.
The Compliance and Ethics domain is one of 8 exam domains on the Certified Information Security Manager (CISM) certification exam by ISACA. At 12% of the total exam, this domain is important but should be balanced with higher-weighted domains in your study plan.
The CISM exam consists of 150 questions with a time limit of 4 hours and a passing score of 65%. That means approximately 18 questions on your exam will come from the Compliance and Ethics domain.
Multi-Factor Authentication (MFA)
A security mechanism that requires two or more independent credentials to verify a user's identity, combining factors fr...
SIEM (Security Information and Event Management)
A software solution that aggregates and analyzes security data from across the organization — including logs from firewa...
Vulnerability Assessment
A systematic process to identify, quantify, and prioritize security vulnerabilities in systems, applications, and networ...
Compliance
The act of conforming to established guidelines, specifications, regulations, or legislation related to information secu...
CASB (Cloud Access Security Broker)
A security policy enforcement point placed between cloud service consumers and cloud service providers to monitor activi...
IAM (Identity and Access Management)
A framework of policies, processes, and technologies for managing digital identities and controlling user access to crit...
DevSecOps
An approach that integrates security practices within the DevOps process throughout the entire software development life...
Patch Management
The process of identifying, acquiring, testing, and installing software updates (patches) to fix security vulnerabilitie...
These certifications also cover topics related to Compliance and Ethics: