The CISM exam is thorough and comprises of 150 multiple-choice questions.The scoring is done on a scale of 200-800, and an individual must get 450 or a higher score to be considered a pass on the exam.

CISM certification exams can now be taken via online remote proctored or at an in-person testing center.

The total duration of the exam is 4 hours (240 minutes).

Individuals have 4 attempts within a rolling 12 months period to pass the exam. Those that do not pass on their first attempt are allowed to retake the exam a total of 3 more times within 12 months from the date of the first attempt. To illustrate:
After taking and not passing the exam (attempt 1):
- Retake 1 (attempt 2): Customers must wait 30 days from the date of the first attempt- Retake 2 (attempt 3): Customers must wait 90 days after the date of the second attempt- Retake 3 (attempt 4): Customers must wait 90 days after the date of the third attempt

CISM Certification is valid for 3 years from the date certified.

Eligibility
To be eligible for this certification, the candidate needs to fulfill the criteria;A completed application submitted within five years from the date of initially passing the examination (you must ensure that all experience is independently verified by employers).The experience must have been gained within the ten years preceding the application date for certification or within five years of passing the examination. Also, three of the five years of work experience must be gained in an information security manager role. (it must be broad and gained in three of the four CISM domains).
Pre-requisites
There are no formal prerequisites for this certification.