CISM training in Singapore
Prepare to Lead Information Security
Build the management judgement behind security governance, risk decisions, security programmes and incident response. EduDelphi combines live teaching with extensive LMS resources, practical questions, multiple mocks and personal faculty support.
What is CISM? CISM stands for Certified Information Security Manager. It is ISACA’s professional certification for information security management. EduDelphi provides the training; ISACA sets the examination and awards the certification after its requirements are met.
| Live tuition | 40 live faculty-led training hours |
|---|---|
| Study options | Singapore classroom, live online, private, supported self-paced and corporate training |
| Practice and revision | 3,000+ CISM questions, multiple full-length timed mocks and personal feedback |
| Learning support | Recordings, extensive LMS resources, AI study assistant and live doubt-clearing |
| Fees and payment | SGD quotation with instalment options |
Suitable for security professionals, IT risk and GRC specialists, auditors, programme managers and aspiring security leaders. You can prepare for the exam before completing the certification experience requirement.
Included in your course
What Does EduDelphi Provide?
A complete learning and revision journey, with resources and people to help you move forward.
Live Teaching and Recordings
Learn the concepts, discuss management decisions and revisit explanations through class recordings.
3,000+ Questions and Multiple Mocks
Practise by domain, work through mixed scenarios and take full-length timed mocks with explained answers.
Extensive LMS Resources
Clear notes, mind maps, infographics, revision sheets, cheat sheets, a glossary, visual summaries and much more.
Live Tutor Support
Ask questions, clear doubts and receive individual feedback on mistakes, mock performance and difficult topics.
Study Planning and Revision
Use a clear study plan, review weaker areas and focus your practice with faculty guidance and revision support.
AI Study Assistant and Certificate
Get help explaining concepts and finding resources in the LMS. Receive an EduDelphi Certificate of Training.
CISM syllabus and domain weights
What Will You Study?
Taking CISM in 2026? Check Your Exam Date.
ISACA’s revised CISM exam outline takes effect on 3 November 2026. Tests through 2 November use the earlier weights. EduDelphi preparation is matched to your intended exam date, including the revised architecture, strategy and programme-development coverage.
| CISM domain | Through 2 Nov 2026 | From 3 Nov 2026 |
|---|---|---|
| Information Security Governance | 17% | 18% |
| Information Security Risk Management | 20% | 20% |
| Information Security Program | 33% | 33% |
| Incident Management | 30% | 29% |
1. Information Security Governance
Connect information security with business objectives. Study governance, organisational roles, legal and contractual obligations, security strategy, policies, budgets, culture and management reporting. The revised outline strengthens enterprise and information security architecture.
Practise the decision: Which security priority deserves investment, and how would you justify it to management?
2. Information Security Risk Management
Identify and assess information risk, understand risk appetite and tolerance, evaluate treatment choices and communicate residual exposure. Work through risk ownership, third parties, control effectiveness, changing threats and ongoing risk monitoring.
Practise the decision: Who can accept a remaining risk, and what information do they need?
3. Information Security Program
Build and maintain a security programme that supports the business. Cover resources, policies, standards, control selection, architecture, implementation, awareness, supplier relationships, programme performance and meaningful metrics.
Practise the decision: How do you turn a security strategy into a workable programme with owners and measures?
4. Incident Management
Prepare for, identify, assess and respond to incidents. Study roles, escalation, communication, investigation coordination, containment, recovery, exercises and lessons learned. Connect the incident plan with business continuity and management decisions.
Practise the decision: What should management do first when an incident threatens a critical service?
Source: ISACA’s 2026 CISM exam update. Exam policies and references checked October 2026.
Your CISM study platform
Learn, Practise and Improve in One LMS
The live classes are one part of your preparation. Your LMS brings teaching, practice, revision and support together so you know what to study next.
-
Learn
Use live teaching, recordings, clear notes, visual resources and the AI study assistant to understand the concepts.
-
Practise
Work through topic questions, mixed scenarios and multiple timed mocks. Read explanations for the best answer and the close alternatives.
-
Improve
Review mistakes with faculty, identify weaker areas and focus your revision. Return to difficult topics with a clearer plan.
3,000+ practice questions plus extensive learning and revision resources. Human faculty support remains available alongside the AI assistant.
How do the questions, mocks and feedback work together?
Start with domain practice, then move into mixed management scenarios and timed full mocks. Review why an answer is appropriate, not just whether you selected it. Faculty help you distinguish a knowledge gap from a reading, judgement or timing issue and guide the next round of practice.
Use mistake review, targeted questions and revision resources to strengthen weaker areas. Mocks are EduDelphi practice assessments, not live exam questions or a prediction of your result.
Study your way
Singapore Classroom, Live Online and More
Classroom in Singapore
Learn face to face with faculty, discuss scenarios and build a regular study routine. Ask for current classroom arrangements.
Live Online
Join interactive teaching, ask questions and use recordings and LMS resources around work commitments.
Private and Flexible Study
Choose private 1:1, supported self-paced, focused revision or intensive arrangements. Self-paced learners also receive faculty support.
Corporate onsite, private company cohorts and blended programmes are available. Your study plan reflects your experience, target exam date and available preparation time.
Meet your faculty
Experienced CISM and Risk Faculty
Kashif Akhtar
CISM | CISA | CRISC | CCSP | CDPSE | PMP | Qualified Engineer
30+ Years in Cybersecurity, Technology Governance & Enterprise Risk | 13+ Years in Professional Certification Training
Kashif brings 30+ years of practical experience across cybersecurity, enterprise technology, information risk and governance. For Singapore learners, he connects ISACA concepts with banking, fintech, technology, telecom, regional headquarters and critical infrastructure.
Read about Kashif’s teaching approach
His sessions cover information security governance, risk management, security programme development, third-party and cloud risk, incident management, resilience, metrics and executive reporting.
Kashif is particularly strong at teaching the CISM management mindset. Candidates learn what should happen first or next, distinguish technical fixes from management-level responses, understand risk ownership and align security with business objectives.
Tanvi P.
CISA | CIA | CFE | CAMS
Former Regional Financial Crime Risk, Standard Chartered | Former Vice President, Citi Global Investigations Unit | Former KPMG Forensic Services Manager
20+ Years in Risk, Assurance, Investigations & Control Environments. Tanvi brings a governance, assurance and incident-risk perspective, backed by senior experience across major international financial institutions and Singapore/APAC environments.
Read about Tanvi’s teaching approach
Her sessions show how security failures become enterprise-level issues: weak governance, privileged-access failures, third-party incidents, insider threats, ineffective monitoring and poor escalation.
She helps learners understand control ownership, incident response, root-cause analysis, remediation, management reporting and the relationship between cyber risk and wider operational or regulatory risk. Her judgement-heavy scenarios help candidates choose priorities supported by risk and evidence.
Exam and certification
CISM Exam, Eligibility and Booking
You can take the CISM exam before you meet the certification experience requirement. Passing the exam and receiving the professional certification are separate steps.
| Exam fact | Current position |
|---|---|
| Format and duration | 150 multiple-choice questions in four hours |
| Passing score | 450 on ISACA’s 200-800 scaled score; not 450 marks or a simple percentage |
| Delivery | PSI test centre or remote proctoring, subject to current availability and requirements |
| Results | Preliminary status after the exam; official results normally within 10 working days |
| Certification experience | Five years of qualifying information security experience, including management experience across at least three CISM domains; permitted substitutions may apply |
| Application after passing | Apply within five years and satisfy ISACA’s experience and other requirements |
Can education or other certifications reduce the experience requirement?
ISACA permits specified substitutions for up to two years of the general experience requirement. Examples include qualifying CISA or CISSP status and relevant postgraduate education. At least three years of qualifying information security management experience across three CISM domains remain necessary.
Substitutions are subject to the current application rules; they do not remove the management experience requirement. Check ISACA’s certification requirements.
How do registration and PSI scheduling work?
- Register with ISACA. Membership is optional. Check your name and identification details carefully.
- Use your eligibility window. The current exam eligibility period is six months.
- Book through PSI. Appointments are normally visible up to 90 days ahead. Check the live centre or remote-testing options.
- Prepare for exam day. Review identification, check-in and any remote system requirements. Reschedule at least 48 hours ahead for the current no-penalty policy, within your eligibility period.
EduDelphi provides registration and booking guidance. ISACA and PSI control eligibility, appointments and examination policies.
What happens if I need a retake?
ISACA currently allows up to four attempts within a rolling 12-month period. Waiting periods after unsuccessful attempts are 30 days, then 90 days, then 90 days. A new exam fee applies. Check the current candidate guide before rebooking.
Sources: ISACA CISM · 2026 Exam Candidate Guide. For a fuller explanation, read our CISM exam format and domains guide.
CISM course fees in Singapore
Get Your SGD Tuition and Study Plan
Ask for a quotation for your preferred classroom, online, private, revision or self-paced route. Instalment options are available.
EduDelphi tuition covers your selected training package. ISACA exam, certification and membership charges are separate.
Official CISM cost reference
| ISACA item | Current reference | When it applies |
|---|---|---|
| CISM examination | US$575 member / US$760 non-member | Exam registration; membership is optional |
| Certification application | US$50 | When applying for certification |
| Annual maintenance | US$45 member / US$85 non-member | After certification |
Reference amounts checked October 2026; confirm the current amount at ISACA checkout. Optional membership and any separately purchased study products are additional choices.
Try a management decision
Sample CISM Practice Question
Original EduDelphi practice question. This is not an official ISACA exam item.
A Singapore regional business is preparing to launch a customer service using an outsourced platform. A security review finds a material access-control weakness. The provider proposes a temporary workaround, but its effectiveness has not been assessed. The business sponsor wants to launch on time. No authorised risk-acceptance decision has been made.
What should the information security manager do next?
- Accept the workaround because the provider owns the platform.
- Ask the authorised business risk owner to decide, supported by an assessment of the exposure and available treatment options.
- Cancel the launch permanently.
- Record the weakness for the next annual audit and proceed.
Show the answer and explanation
Best answer: B. The manager should make the exposure and treatment options clear so an authorised risk owner can make an informed decision. A provider’s proposed workaround is not the same as assessed control effectiveness or approved risk acceptance.
A transfers accountability incorrectly. C makes a permanent business decision without the necessary assessment and authority. D delays action on a material exposure. The key is informed, accountable risk decision-making, not automatically choosing the fastest technical fix.
Corporate training in Singapore
CISM and Security Management Training for Teams
Build a common approach to security decisions across managers, security teams, GRC specialists and business stakeholders.
Corporate CISM Training
Private certification-preparation cohorts with live teaching, LMS resources, questions, multiple mocks and faculty feedback. Use relevant company scenarios and a shared team study plan.
Choose Singapore onsite, private classroom, live online or blended delivery, with schedules adapted to your team.
Practical Security Management Workshop
A workplace-focused option for teams that need stronger management capability without a full exam-preparation programme.
Work through security priorities, risk ownership, an improvement plan, management reporting and an incident tabletop. Outputs can include an ownership map, a priorities brief and an incident-action log.
Singapore career relevance
Who Benefits from CISM Training?
CISM is relevant when your work involves security governance, information risk, programme leadership, third-party oversight or incident coordination. Singapore’s financial institutions, regional headquarters and technology businesses need professionals who can connect security decisions with business priorities.
Roles may include information security manager, security programme manager, IT risk or GRC manager, security consultant and security leadership positions. Certification complements experience; it does not guarantee a job, promotion or salary.
Apply the Concepts to Singapore Workplaces
Discuss supplier and cloud oversight, privileged access, resilience, incident escalation and management reporting using Singapore/APAC scenarios. MAS Technology Risk Management guidance provides useful local context for financial institutions; it is not an additional CISM exam syllabus or an endorsement of this course.
Context: MAS Technology Risk Management Guidelines · CSA SG Cyber Leaders.
CISM vs CISSP, CISA and CRISC
| Course | Main focus | Choose it when |
|---|---|---|
| CISM | Information security management | You lead security governance, risk, programmes or incident-management decisions |
| CISSP | Broad security knowledge and practice | You need breadth across security architecture, engineering, operations and governance |
| CISA | Information systems audit and assurance | You assess systems, evidence and control effectiveness through audit |
| CRISC | Information and technology risk | Your work centres on risk assessment, response, controls and risk reporting |
| CCSP | Cloud security | You want deeper cloud architecture, data, application and operations security |
Compare the audit and management paths in our CISA vs CISM guide, or explore cybersecurity courses in Singapore.
Your questions answered
CISM Course Singapore FAQs
Is EduDelphi an exam or certification provider?
EduDelphi provides CISM preparation, learning resources and faculty support. ISACA administers the CISM certification process. Completing the course earns an EduDelphi Certificate of Training; professional CISM certification requires ISACA’s exam, experience and application requirements.
Can I join without five years of experience?
Yes. You can study and take the exam before completing the certification experience requirement. To receive CISM, you must satisfy ISACA’s applicable experience and other requirements and apply within five years after passing.
Is 40 hours the whole preparation commitment?
No. The course includes 40 live faculty-led hours. Plan additional time for reading, LMS resources, question practice, revision and mocks. Your starting knowledge, target date and progress determine the wider study plan.
Can I study CISM in a Singapore classroom?
Yes. Classroom, live online, private and corporate arrangements are available. We also offer supported self-paced and focused revision options. Ask for the current arrangements for your preferred format.
Does self-paced study include faculty support?
Yes. Supported self-paced study includes recordings and LMS resources with faculty help, doubt-clearing and revision support. You are not limited to studying alone.
Does the course follow the November 2026 CISM changes?
Yes. Preparation is matched to your exam date. From 3 November 2026, the revised domain weights are 18% Governance, 20% Risk Management, 33% Security Program and 29% Incident Management.
How do I maintain CISM after certification?
ISACA currently requires at least 20 CPE hours annually and 120 over three years, annual maintenance fees and compliance with its policies. From 1 January 2027, at least 90 of the 120 hours must align with the certification content; up to 30 may cover eligible broader professional development.
See CISM maintenance requirements and ISACA’s 2027 CPE policy.
Can I use SkillsFuture Credit or employer reimbursement?
Eligible Singapore Citizens may be able to use their SkillsFuture Credit (Base Tier) for selected EduDelphi courses through an individual case-by-case assessment by SkillsFuture Singapore. EduDelphi can provide the course invoice, syllabus, learning outcomes, enrolment documentation and other supporting documents required for the application.
For employer sponsorship, ask us for a course outline and quotation to support your learning-budget request. Funding depends on the relevant scheme and application approval.
Take the next step
Request CISM Course Details
Tell us how you would like to study. We will share the course structure, SGD tuition, instalment options and a practical next step.
EduDelphi Singapore
250 N Bridge Rd, Raffles City Tower
Singapore 179101
Plan Your CISM Preparation
Leave your name, email and phone number.
