No account requiredCISM

Free ISACA CISM Practice Test (CISM)

CISM is a management certification, not a technical one. These questions are written from a security manager's seat across all four ISACA domains, where the answer turns on who decides, who owns the risk and what comes first rather than on how a control is configured.

10 questions, answers and explanations included. No account needed.

1,627questions in the bank
4exam domains
Advancedlevel
240minute exam
20free a day, signed out

What you get, free

Every part of ISACA CISM prep on CertClue, with no paywall and no trial. An account unlocks the full bank; nothing here is held back for a paid tier.

1,627 practice questions

Objective-tagged, with a worked explanation on every one.

Performance-based questions

Hands-on task simulations - drag-and-drop, ordering, categorising - not just multiple choice.

Timed exam simulator

A full mock under real conditions: 150 questions, 240 minutes.

Readiness score

Per domain, tied to your exam date, so you know when you are ready to sit.

Question 1 of 100 correct
foundationalInformation Security Governance

A newly formed holding company is establishing information security governance for the first time. What is the PRIMARY purpose of an information security governance framework?

Straight from the objectives

About the ISACA CISM exam

These facts come from the objectives published for CISM, and our question bank is weighted to match them.

Exam code
CISM
Questions
Up to 150
Time limit
240 min
Passing score
450 / 800

ISACA CISM questions people ask

Up to 150 questions in 240 minutes. The exact number varies between test forms, which is why the objectives say "up to" rather than giving a fixed count.

A scaled score of 450 on ISACA's 200 to 800 scale. That is a scaled score, not a percentage and not a count of correct answers, and ISACA does not publish how raw answers convert to it. Anyone telling you it equals a specific percentage is guessing.

150 questions in 240 minutes. All of them are multiple choice with a single best answer; CISM does not use the choose-two format that the CompTIA and AWS exams do.

You can sit the exam at any time. The five years of information security management experience is required to become certified, not to take the exam, and you have five years from passing to submit it. Up to two years can be waived by certain other certifications and degrees.

They are different rather than ranked. CISM is narrower and almost entirely management: governance, risk, programme and incident management, answered from a manager's seat. CISSP spans eight domains and goes deeper technically. People coming from a hands-on background usually find CISM's judgement framing the harder adjustment.

No, and be wary of any site that claims otherwise. Every question here is written from scratch against the published exam objectives. Sitting an exam having memorised leaked live questions breaks the non-disclosure agreement you accept at the test centre and can get your certification revoked.

Yes. Without an account you get 20 questions a day, and the count resets every day. A free account removes the daily cap and unlocks the full ISACA CISM question bank, flashcards, study notes, performance-based questions, a timed exam simulator and a readiness score. There is no paid tier and no card required.

Want the full ISACA CISM question bank?

A free account unlocks all 1,627 practice questions for this exam, plus flashcards, study notes, the timed exam simulator and a readiness score that tracks your weakest domains. There is no paid tier - all of it is free.

  • No credit card
  • No trial timer
  • Every certification track
Create a free account
Free core

All prep, no paywall.

Built from objectives

Mapped to the published CISM domains.

Independent

Not affiliated with ISACA.

Honest certificate

Completion, not the industry certification.