Syllabus-first teaching
CISM syllabus chapters
Detailed public baseline effective 2022; the replacement exam starts 3 November 2026 and its exact revised topic/task mapping remains unverified · Source checked 2026-10-22
35 topic chapters teach concepts before asking you to apply them. Explore the visual model and memory hint, try the concept activity, then read the explanations and worked example. Selected topics also include interactive local simulations.
Thirty-five separate chapters follow the currently accessible detailed topic baseline. The announced strategy and architecture changes are additional context, not invented revised identifiers. Independent approval, exhaustive supporting-task treatment and exam-readiness validation remain pending. Chapter progress is separate from the earlier domain-overview progress.
Official syllabus reference · Edition and coverage boundaries
Your CISM chapters progress
Loading progress…
Saving is off; progress stays in this course session only. No academy account or cloud sync. Each course has separate data.
Individual quiz answers remain in memory only. Completed score summaries can be saved and backed up. Storage details
Find a lesson
35 matching lessons
Domain 1 · About 5 minutes
1A1 · Organizational culture and security behavior
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 1 · About 5 minutes
1A2 · Legal, regulatory and contractual requirements
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 1 · About 5 minutes
1A3 · Structures, roles and decision authority
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 1 · About 5 minutes
1B1 · Develop an information-security strategy
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 1 · About 5 minutes
1B2 · Select and tailor governance frameworks
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 1 · About 5 minutes
1B3 · Strategic planning, business cases and resources
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 2 · About 5 minutes
2A1 · Emerging exposure and the threat landscape
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 2 · About 5 minutes
2A2 · Analyze vulnerabilities and control deficiencies
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 2 · About 5 minutes
2A3 · Assess risk with explicit methods and uncertainty
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 2 · About 5 minutes
2B1 · Choose and combine risk responses
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 2 · About 5 minutes
2B2 · Assign risk ownership and control accountability
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 2 · About 5 minutes
2B3 · Monitor risk and request decisions
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3A1 · Build sustainable program capacity
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3A2 · Identify and classify information assets
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3A3 · Use standards to structure a security program
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3A4 · Make policies and procedures operable
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3A5 · Design program metrics before reporting
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3B1 · Design and select controls for a stated objective
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3B2 · Implement controls within operating services
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3B3 · Test design, implementation and operating effectiveness
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3B4 · Manage role-specific security education
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3B5 · Manage suppliers and fourth-party dependencies
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 3 · About 5 minutes
3B6 · Communicate program performance for the audience
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4A1 · Build an incident-response plan
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4A2 · Use business impact analysis to establish priorities
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4A3 · Sustain essential activity during disruption
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4A4 · Plan technology recovery around service objectives
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4A5 · Classify incidents consistently
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4A6 · Train and exercise response capability
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4B1 · Use response tools with evidence limits
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4B2 · Investigate and evaluate incident evidence
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4B3 · Choose containment with business and evidence tradeoffs
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4B4 · Coordinate escalation, reporting and notification
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4B5 · Eradicate causes and validate trusted recovery
Management concept and decision mechanism
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4B6 · Conduct a post-incident review that changes capability
Management concept and decision mechanism
Not marked complete · Not bookmarked
Use the practice bank after studying
The existing question bank is supporting practice, not a substitute for these chapters or evidence of certification readiness. Its questions are not an exhaustive test of every new chapter.
Open CISM practice