ISACA CISM — Verified Resources
Links checked June 2026. Be honest with yourself about the trade-off: ISACA's own materials are excellent but paid. A realistic free path leans on Prabh Nair's YouTube content plus this site's own practice engine — and that combination is enough to pass if you put in the reps.
Free resources FREE
| Resource | Covers | Why it's worth it |
|---|---|---|
| Prabh Nair — YouTube channel | All 4 domains: governance, risk, program, incident management — plus "think like a manager" exam strategy | The most popular free CISM teacher. Genuinely strong on the management mindset and tricky question logic. This is your free spine. |
| Prabh Nair — CISM playlist | Sequenced CISM lessons and exam-question walkthroughs | The same content organized as a study path — work through it domain by domain alongside the study guide. |
| This site — CISM Practice engine | Domain-tagged questions with explanations + a 150-question, 4-hour exam simulator | Your free, unlimited active-recall and full-mock tool. Filter by domain or by your missed questions. |
| ISACA Official CISM Page | Authoritative domains, eligibility, fees, scheduling, and the certification path | The source of truth. Confirm exam facts and your applicable Exam Content Outline here before booking. |
| ISACA CISM Exam Content Outline | The official domain/task/knowledge statements — and the 3 Nov 2026 ECO change | Your master checklist. Verify which ECO version applies to your exam date. |
| ISACA Exam Candidate Guide | Registration, scheduling, exam-day rules, scoring, and retake policy | Free PDF covering everything administrative — read it once before you register. |
| ISACA Free CISM Practice Quiz | A short set of sample questions at official difficulty | Free and authentic to ISACA's question style — calibrate against the real thing. |
| Pocket Prep — CISM (free tier) | Free daily practice questions on mobile/desktop | Good bite-sized phone study; the free tier gives a rotating set of questions per day. |
Low-cost & official paid LOW-COST PAID
ISACA's official prep is the most exam-accurate material there is — but it is paid, and members get meaningful discounts. Budget for at least the QAE database if you can.
| Resource | Covers | Why consider it |
|---|---|---|
| CISM QAE Database PAID | ~1,000+ official practice questions with explanations, by domain and full-length | The single highest-value paid item — ISACA's own questions in ISACA's own style. The closest proxy for exam difficulty. |
| CISM Review Manual PAID | The official domain-by-domain reference text (digital or print) | Authoritative depth if the free videos leave gaps. Pair it with the QAE rather than reading cover to cover. |
| ISACA Membership LOW-COST | Member exam price ($575 vs $760) + discounts on the Review Manual and QAE | The math often favors joining: the per-attempt and materials discounts can offset much of the membership fee. |
Minimum viable kit (free): Prabh Nair's CISM videos + this site's practice engine + ISACA's free practice quiz and the official ECO. If you can spend a little: add the official QAE database — it is the best money you'll spend on CISM.