Question 1

CISM vs CISSP, which is harder?

Accepted Answer

CISSP is harder and broader (8 deeply technical domains, adaptive testing). CISM is narrower, more management/governance focused, and uses a linear 150-question test. If you're a hands-on engineer, CISSP fits; if you're moving toward security management/CISO track, CISM is the more efficient and respected credential.

Question 2

CISM salary in Saudi Arabia

Accepted Answer

CISM holders in Saudi Arabia (Riyadh, Jeddah, NEOM) typically earn SAR 25,000–50,000/month ($6,700–$13,300) for security manager roles, with Vision 2030 mega-projects driving strong demand. Add tax-free packages and housing/transport allowances for an effective 25–35% premium over uncertified peers.

Question 3

What are the requirements for CISM certification in 2026?

Accepted Answer

To pursue Certified Information Security Manager (CISM), candidates typically need 5 years of information security work experience. the certifying body sets the official eligibility rules, and requirements may differ slightly by country or candidate background. Always confirm the latest criteria on the official the certifying body site before applying.

Question 4

How much does CISM certification cost?

Accepted Answer

CISM exam fees are set by the certifying body and vary by region. Total cost, including exam fees, application fees, study materials and prep courses, typically ranges from a few hundred to several thousand US dollars depending on the country and the prep route you choose. Many candidates spend more on preparation than on the exam itself.

Question 5

How long does it take to prepare for CISM?

Accepted Answer

Most candidates spend 8–16 weeks preparing for CISM, depending on prior experience and study intensity. The exam itself runs 4 hours, with a reported pass rate of ~50%. A structured plan (ISACA Official Review Manual; QAE database practice questions) significantly improves first-attempt pass odds.

CISM Exam Preparation