Last updated:
CISM Exam Update 2026: Which Outline Applies on 3 November?
If your CISM exam is before 3 November 2026, prepare against the current outline. If your exam is on or after 3 November 2026, ISACA says the updated outline applies. The four domains stay the same and two weights change by one point, so CertArc's CISM practice, which follows the 2026 outline, covers the same domains either way.
Which outline should you use?
| Exam timing | Outline | What to do |
|---|---|---|
| Before 3 November 2026 | Current CISM outline | Continue with the current official outline and materials. |
| On or after 3 November 2026 | Updated CISM outline | Use the updated outline and ISACA's matching official materials. |
| Your exam date may move | Confirm your actual appointment date | Recheck ISACA before changing your preparation plan. |
- Exam timing:
- Before 3 November 2026
- Outline:
- Current CISM outline
- What to do:
- Continue with the current official outline and materials.
- Exam timing:
- On or after 3 November 2026
- Outline:
- Updated CISM outline
- What to do:
- Use the updated outline and ISACA's matching official materials.
- Exam timing:
- Your exam date may move
- Outline:
- Confirm your actual appointment date
- What to do:
- Recheck ISACA before changing your preparation plan.
What has ISACA confirmed?
The official CISM Exam Content Outline says the updated outline becomes effective on 3 November 2026. ISACA's 2026 job practice update keeps the four domains and changes two weights. The official CISM certification page remains the primary place to confirm current certification information.
| Domain | 2022 outline | 2026 outline |
|---|---|---|
| 1. Information Security Governance | 17% | 18% |
| 2. Information Security Risk Management | 20% | 20% |
| 3. Information Security Program | 33% | 33% |
| 4. Incident Management | 30% | 29% |
ISACA states that buying its current preparation material does not grant access to the newer material later. This statement concerns ISACA's materials; it is not a statement about CertArc access.
What should candidates studying now do?
Keep working against the outline that applies to your scheduled exam date. If your appointment is near the transition, avoid relying on an undated summary or an unsourced domain comparison. Check the official page again before buying updated materials.
Continue building transferable management judgment: governance accountability, risk ownership, business impact, program priorities, and incident decision sequencing. Those skills apply under both outlines.
CertArc update status
CertArc’s CISM practice follows the 2026 outline: its questions and practice exams use the 2026 domain weights. For an exam before 3 November 2026, the domains are unchanged and two weights differ by one point. The questions are original CertArc scenarios, not ISACA material.
CISM 2026 exam update FAQ
Which outline applies before 3 November 2026?
The current CISM exam outline applies to exams taken before 3 November 2026. Continue preparing with the current official outline and materials, while checking ISACA again if your appointment changes.
Which outline applies on 3 November 2026?
ISACA says the updated CISM exam outline applies starting on 3 November 2026. If your exam is on or after that date, use the updated outline and ISACA’s matching official preparation materials.
What changes in the 2026 outline?
The four domains stay the same. Information Security Governance moves from 17% to 18% and Incident Management from 30% to 29%. Risk Management stays at 20% and the Information Security Program at 33%.
Does buying current ISACA material include the update?
No. ISACA states that buying its current preparation material does not grant access to the newer material later. This statement concerns ISACA's materials; it is not a statement about CertArc access.
Does CertArc follow the 2026 outline?
Yes. CertArc’s CISM practice follows ISACA’s 2026 outline, with Governance at 18% and Incident Management at 29%. For an exam before 3 November 2026, the domains are unchanged and two weights differ by one point.
Continue with the CertArc CISM pathway
CertArc practice follows the 2026 outline and focuses on the reasoning behind each decision.
Review the CertArc CISM preparation pathway