What is the CISM certification?

CISM (Certified Information Security Manager) is ISACA's credential for security managers, CISOs, and vCISOs who are responsible for designing, building, and managing information security programs. It covers 4 domains: Information Security Governance, Information Risk Management, Information Security Program Management, and Incident Management.

Is CISM required for a vCISO role?

CISM is the most precisely mapped credential for the vCISO role. All four domains — governance, risk management, program management, and incident management — reflect actual vCISO responsibilities. Many CMMC DoD contractors require their vCISO to hold CISM.

How long does CISM preparation take?

Most candidates need 120–200 hours of preparation. VirtualTrainingPro live CISM prep typically spans 6–8 weeks in a cohort format.

What is the difference between CISM and CISSP?

CISM is an ISACA credential focused on security management, governance, and risk management for managers and executives. CISSP is an (ISC)² credential with broader technical security coverage. CISM is generally preferred for management, vCISO, and program leadership roles; CISSP is more common in technical security architect and practitioner roles.

VirtualTrainingPros

CISM Exam Preparation

"The certification for security managers, CISOs, and vCISOs"

CISA

CISM

CRISC

CDPSE

COBIT 2019

CGEIT

CCAK

CCOA

AI Audit (AAIA)

AI Security Management

Corporate Training

Request a Quote

Course Registration

Ready to Get Certified?

Book a session or request a corporate quote.

Reserve Your Cohort Seat Book Now

Enroll in the next CISM cohort

New cohorts start monthly — reserve your seat and we'll confirm your start date within one business day.

CISM is the most precisely mapped credential for the vCISO role — all four domains reflect actual vCISO responsibilities. For DoD contractor vCISOs building CMMC programs, CISM provides both the credential and the governance framework.

CISM Certification Training — All 4 Domains, Live Instruction

The CISM (Certified Information Security Manager) is ISACA's credential for security managers, CISOs, and vCISOs — professionals responsible for designing, building, and managing information security programs. VirtualTrainingPros' CISM training is taught by active security management practitioners who bring vCISO and CISO experience to every exam domain.

Key Features

All 4 CISM Exam Domains Covered

Complete coverage of all ISACA CISM exam domains aligned to the current exam content outline.

Domain 1: Information Security Governance

Establish and maintain an information security governance framework aligned to organizational strategy and regulatory requirements.

Domain 2: Information Risk Management

Identify, assess, and prioritize information risk in business terms — the core CISM competency for vCISOs and security managers.

Domain 3: Information Security Program Management

Design, develop, and manage an information security program that aligns with business objectives and satisfies compliance requirements.

Domain 4: Incident Management

Develop and test incident response capabilities — from detection and containment to post-incident review and lessons learned.

vCISO and CISO Role Context

All domains taught with vCISO and CISO practical context — not just exam theory.

CMMC Security Program Context

CMMC security program management context woven throughout Domain 3 instruction.

Individual and Corporate Sessions

Available for individual candidates and corporate groups. DoD contractor team packages available.