Certified Information Security Manager credential artwork

Certified Information Security Manager (CISM) Courses

Validates knowledge of information security governance, risk management, security program development and management, and incident management.

A CISM course has to cover the full November 2026 outline and teach you to pick the best answer from a security manager's view. We compared ISACA's course and review manual on format, depth and price.

Most people should start with ISACA's CISM Review Manual ($139) and add practice questions, since the manual is the core reference for the November 2026 outline. Choose the Online Review Course ($895) if you want guided instruction or your employer pays.

ISACA's new CISM job practice outline takes effect November 3, 2026; both listed ISACA courses cover it. Source ↗

CourseBest forFormatPrice
CISM Online Review CourseOfficial guided courseInteractive$895
CISM Review Manual, 17th editionOfficial referenceBook$139
Official guided course

CISM Online Review Course

ISACA's narrated online course, about 16 hours, with interactive modules, case studies and job aids that teach security-management concepts. It follows the November 2026 outline and comes from the organization that writes the exam.

Great fit if you want official guided instruction or your employer pays

Poor fit if you prefer to read and want the lowest cost; choose the Review Manual

Official reference

CISM Review Manual, 17th edition

ISACA's domain-by-domain reference for the CISM body of knowledge, updated for the November 2026 outline. It works as a reference to return to, including when you read the explanations to practice questions.

Great fit if you prefer reading or want a reference for practice-question explanations

Poor fit if you want guided lessons and case studies; choose the Online Review Course

How to choose a course

  • Match the November 2026 outline. ISACA's new CISM job practice outline takes effect November 3, 2026, and both ISACA products cover it. Check the version of any third-party course before you buy.
  • Think like a manager. CISM asks for the best decision for the organization, not the most technical fix. Case studies and practice questions teach that judgement better than reading alone.
  • Pair study material with questions. The manual and the 16-hour course teach the content, but practice questions show how ISACA words the exam. Add a question bank to either.
  • Check member pricing. ISACA members pay less: $795 against $895 for the course and $109 against $139 for the manual.

Recommended course combinations

  • Lowest cost: The Review Manual ($139), ISACA's free CISM Practice Quiz and Hemang Doshi's practice tests on Udemy ($20).
  • Official materials: The Review Manual ($139) with ISACA's Questions, Answers & Explanations Database ($399, or $299 for members).
  • Guided instruction: The Online Review Course ($895) with Pocket Prep's CISM Question Bank ($50 for 3 months).
  • Employer pays: The Online Review Course ($895), the Review Manual ($139) and the ISACA question database ($399).

Compare all practice tests →

Course FAQ

What is the best CISM course?

For most people, ISACA's CISM Review Manual plus a practice question bank. Choose ISACA's Online Review Course if you want guided instruction.

Can I pass CISM without a course?

Yes. Many candidates pass with the Review Manual and a question bank. The course is about 16 hours of narrated modules and case studies.

How long does it take to prepare for CISM?

Plan for about 100 hours of preparation, including practice questions. The ISACA course adds about 16 hours of structured lessons.

Do I need experience before studying for CISM?

No. You can sit the exam first and apply for certification within five years of passing. Certification needs five years in information security, including three in management.