ISACA · CISM Exam Content Outline effective 1 June 2022, current on 11 October 2026 (Asia/Hong_Kong), corroborated by ISACA Certification Exam Candidate Guide Version 1.26, Appendix C. Current weights: 17%, 20%, 33%, 30%. ISACA has announced a replacement effective 3 November 2026; that future outline is not used here. The workbook exam label matches the official credential name. Assigned category '6. Health Information & Coding' is an administrative workbook classification, not the official examination scope; the assigned canonical slug is preserved.

This original 20-question sample covers selected topics across the outline. It does not reproduce official exam questions or cover every tested topic.

• CISM Exam Content Outline
• ISACA Certification Exam Candidate Guide, Version 1.26
• ISACA’s CISM Certification Celebrates 20 Years with Increased Focus on Management of Security Programs and Incident Management
• ISACA Updates CISM Exam Content Outline, Factoring in Today’s Technologies, Security Responsibilities
• ISACA Interactive Glossary
• The NIST Cybersecurity Framework (CSF) 2.0
• NIST SP 800-39: Managing Information Security Risk
• NIST SP 800-30 Revision 1: Guide for Conducting Risk Assessments
• NIST SP 800-53 Revision 5: Security and Privacy Controls for Information Systems and Organizations
• NIST SP 800-50 Revision 1: Building a Cybersecurity and Privacy Learning Program
• NIST SP 800-55 Volume 1: Measurement Guide for Information Security—Identifying and Selecting Measures
• NIST SP 800-34 Revision 1: Contingency Planning Guide for Federal Information Systems
• NIST SP 800-61 Revision 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management