ISACA

The 2019 CISA job-practice update is now historical context, not the blueprint candidates should use for a current exam. ISACA’s active CISA exam content outline took effect in August 2024 and remains the relevant framework in 2026. It still uses five domains, but the weighting and emphasis have moved with the work of modern information-systems auditors. The current distribution is 18% Information Systems Auditing Process, 18% Governance and Management of IT, 12% Information Systems Acquisition, Development and Implementation, 26% Information Systems Operations and Business Resilience, and 26% Protection of Information…

ISACA’s CSX Cybersecurity Practitioner certification is retired. ISACA still allows existing holders to maintain the credential, but new candidates cannot pursue CSX-P as a current certification path. That is the first fact anyone reading older CSX-P career advice needs to know today. The retirement does not make the underlying skills obsolete. CSX-P was built around practical cybersecurity performance: identifying assets, investigating network and host issues, applying security controls, and responding to realistic security problems in a live virtual environment. Those capabilities remain valuable because cybersecurity roles still depend on detection,…

CISM version context: CISM and CRISC support different leadership paths, so salaries should be assessed against roles and experience rather than assumed premiums. ISACA’s CISM outline changes November 3, 2026; that version is still in the future as of October 23. ISACA has long been recognized as one of the most respected professional associations in the information technology and cybersecurity space. Among its portfolio of globally recognized certifications, the Certified Information Security Manager (CISM) and the Certified in Risk and Information Systems Control (CRISC) stand out as two of the…

CISM is a management credential, not a hands-on security-tool exam ISACA’s Certified Information Security Manager credential is designed for people who govern, build, operate, and improve information-security programs. Candidates who approach it as a catalog of security technologies often struggle because the exam asks for management judgment: alignment with business objectives, risk-based prioritization, program governance, stakeholder communication, incident leadership, and evidence that controls are effective. The most useful preparation question is therefore not “which tool would I configure?” but “what should the security manager do first, and why?” That shift…

Continuous testing is now the normal delivery model for ISACA’s major certification exams rather than a new transition. Candidates for CISA, CISM, CRISC, and related credentials can register throughout the year and then schedule through PSI, subject to eligibility and appointment availability. That flexibility is valuable, but it also means candidates need to manage their own registration window carefully. The current process is simpler when you separate four things: buying the exam, receiving eligibility, scheduling the appointment, and later applying for the certification after you pass and meet the experience…

ISACA’s Certified in Risk and Information Systems Control is built for professionals who connect technology risk to business decisions. The current CRISC exam reflects that role directly: governance, risk assessment, risk response and reporting, and technology and security. It is not simply a cybersecurity exam and it is not an audit credential with a different name. CRISC focuses on identifying risk, evaluating its business impact, selecting and monitoring responses, and communicating risk information to the people who own decisions. ISACA updated the CRISC exam in November 2025, so candidates preparing…

Are you looking to supercharge your career in information security? If so, you’ve likely encountered the Certified Information Security Manager (CISM) certification. This prestigious credential from ISACA is perfect for professionals eager to go beyond technical skills and dive into the management side of information security. But how does it affect your paycheck? Spoiler alert: The impact is substantial. Let’s dive into the salary trends for CISM professionals and discover how this certification can significantly enhance your earning potential. Why CISM? Before diving into the salary benefits, it’s essential to…

ISACA Certified Information Security Manager (CISM) is a management-focused security certification for professionals who govern risk, build and operate information security programs, and lead incident-management capabilities. It is not primarily a hands-on penetration-testing or engineering credential. The exam rewards the ability to choose the best management action when technology, risk, business priorities, ownership, and governance all interact. There is an important timing issue in 2026. ISACA is changing the CISM exam content outline on November 3, 2026. Candidates testing before that date should use the current outline; candidates testing on…