ISACA CISM Certified Information Security Manager Study Guide

Prepare for the latest ISACA CISM exam and build real-world security management skills

Now in its Second Edition, the ISACA CISM Certified Information Security Manager Study Guide delivers an efficient, exam-aligned preparation resource written by Mike Chapple, Ph.D., a cybersecurity certification author with over 30 years of industry experience. This guide covers each exam objective while emphasizing the real-world security management skills practitioners need on the job.

The study guide addresses all four CISM domains: Information Security Governance, Information Security Risk Management, Information Security Program, and Incident Management. Each domain includes real-world scenarios, review questions, and practical applications covering enterprise governance, threat landscape analysis, security control implementation, business impact analysis, and business continuity planning.

The chapters are intuitively organized to ensure complete discussions of every objective on the updated exam. You can easily track your progress and areas that still require work. You’ll also find:

• Up-to-date coverage of every CISM exam objective aligned with the 2026 Job Practice update in one study resource
• Practical guidance on leading enterprise security programs, from risk assessment and strategy development to incident response planning
• Complimentary access to the Sybex online learning environment with a test bank, two custom practice tests, electronic flashcards, and a searchable glossary
• Supported by Wiley’s support agents who are available 24x7 via email or live chat to assist with access and login questions

Ideal for security professionals preparing for the ISACA CISM certification or seeking roles in information security management, this study guide equips candidates with both the knowledge to pass the exam and the practical expertise to lead enterprise security programs with confidence.