ISACA · INF-CISM

Information Security Management — Knowledge Assessment

At a glance: a 91-minute online assessment of 70 questions for the Certified Information Security Manager (CISM) course. Pass with 70% or more to earn a verifiable certificate and a digital badge.

91 minutes 70 questions Pass mark 70% 5 attempts Live online proctoring

About this exam

A timed assessment on the core skill areas of Certified Information Security Manager (CISM). Questions are drawn at random from the bank and answer options are shuffled for every attempt.

This is an INFOTICS knowledge assessment that prepares you for the vendor exam (CISM). It is not the official vendor exam.

Exam code: INF-CISM
Duration: 91 minutes
Questions: 70 per attempt, drawn at random from a bank of 104
Pass mark: 70%
Attempts: 5 attempts
Eligibility: Learners enrolled in Certified Information Security Manager (CISM)
Review: Shown as soon as you submit
Course: Certified Information Security Manager (CISM)

What to expect

BeforeRead the rules and confirm. Use a laptop or desktop with a stable connection; the timer starts as soon as you begin.
DuringAnswers save automatically. Flag questions and return to them. Some questions need more than one answer, so read each one carefully.
AfterYour score and domain breakdown appear immediately. Question review: shown as soon as you submit.

Exam rules

70 questions drawn at random from a bank of 100+; answer options are shuffled for every candidate.
91 minutes. The timer starts after check-in and runs on the server; only the proctor can pause it.
Live online proctoring (PeopleCert style): webcam and microphone stay on, you show your photo ID and a 360° room scan at check-in.
Sit alone in a quiet room. No phones, notes, books, smart watches, headphones or second screens.
The exam runs in full screen on one screen. Leaving it, switching tabs, copying or pasting is a violation; the attempt is submitted automatically after 6.
Answers save automatically. Flag questions and review them before you submit. Some questions need more than one answer.
A proctor may message you, pause the exam or end it for misconduct.

Integrity policy: Live online proctoring

PeopleCert-style delivery: at check-in you complete a system check, show your photo ID and a 360° room scan. Your webcam and microphone stay on, a proctor can message you, pause or end the exam, and leaving full screen, switching tabs, using a second screen, copying or pasting are violations. The attempt is submitted automatically after 6 violations.

Recorded events are part of your attempt record and are visible to INFOTICS staff. See our privacy policy.

What is covered

Questions are drawn across these domains in proportion to the bank.

Domain	Questions in bank	Weight
Risk management	32	31%
Programme	25	24%
Incident management	24	23%
Governance	23	22%

Exam questions

How long is the Information Security Management — Knowledge Assessment?

91 minutes, with 70 questions drawn from a bank of 104. The timer runs on the server and continues if your connection drops.

What is the pass mark?

You need 70% or more. There is no negative marking.

Can I retake it?

You can sit it up to 5 times. You can retake straight away. Once you pass, no further attempts are needed.

What do I get when I pass?

An instant score report, a QR-verified certificate and the "Information Security Management — Assessment Passed" digital badge, both verifiable online.