Every link below was opened and checked by RoleMath, labelled official or independent, and shown with the date it was last checked where one is recorded. Nothing here is sponsored, and no exam dumps are listed.
RoleMath has checked 4 free resources for this certification: 3 learning resources and 1 official scope document.
See the certification itself: CISM - Certified Information Security Manager · and what it costs to earn and keep.
Best free resources
| Resource | Type | Publisher | Cost | Source |
|---|---|---|---|---|
| CISM Exam Content Outline | Exam objectives / outline | Official: ISACA | Free (see notes) | official |
| CISM Practice Quiz (official, free) | Free practice questions | Official: ISACA | Free (see notes) | official |
| Destination Certification CISM MindMaps (free video series) | Free structured course | Independent community: Destination Certification | Free (see notes) | independent community |
| ISACA Exam Candidate Guide (official) | Free study aid | Official: ISACA | Free (see notes) | official |
What to know
- CISM Exam Content Outline: RoleMath records this against exam CISM and has not verified whether that is still the current exam — check the vendor's page before relying on it. Free 4-domain outline; review manual/course are paid. An updated outline is effective 3 Nov 2026. (noted when we read this source, 2026-06-14)
- CISM Practice Quiz (official, free): RoleMath records this against exam CISM and has not verified whether that is still the current exam — check the vendor's page before relying on it. Official free sample-question quiz; training products remain paid. (noted when we read this source, 2026-06-30)
- Destination Certification CISM MindMaps (free video series): The page states no exam outline version and no publication date, so check its coverage against ISACA's current job practice before relying on it. Downloads require an email address. Made by a provider that also sells a paid CISM course. (noted when we read this source, 2026-07-31)
- ISACA Exam Candidate Guide (official): Process and policy only. It teaches none of the exam content and is not a study resource. (noted when we read this source, 2026-07-30)
The free path, in order
1. Start from the exam objectives / outline — it is the scope the certifying body itself publishes, and where a vendor also publishes domain weightings they are in it. It may not be a comprehensive list of every exam topic. Study against it, not against a course's table of contents. Where the entry below records an exam version RoleMath has not verified as current, confirm on the vendor's page that you are reading the outline for your exam before you study against it.
2. Work the free structured course(s) above to build the skills — first check each one against What to know above, and where a course was written for a different exam version than the one you will sit, treat it as background rather than as your main preparation. Treat official material as scope authority and community material as instruction; use official sample questions where they exist.
3. Free study lowers what you spend preparing, not what the exam itself costs — see what it costs to earn and keep.
Free resources reduce what you spend to study. No resource guarantees a pass, and a course is not the certification.