How CertArc creates and reviews CISM content
CertArc creates original practice scenarios and maps them to the published CISM exam outline. Content is checked for source accuracy, managerial decision logic, product truth, and compliance boundaries before publication. CertArc does not copy official exam questions, publish brain dumps, or promise exam outcomes.
How original scenarios are created
A scenario begins with a management decision pattern, not a recalled exam item. The writer defines the accountable role, business objective, risk, constraints, and plausible actions. Explanations then show why one option is the stronger managerial response and why the alternatives remain tempting.
How content maps to the CISM outline
Domain labels and coverage statements are checked against the published ISACA CISM Exam Content Outline. CertArc uses that outline to organize study content; it does not claim that its wording or scenarios come from ISACA.
How factual claims are sourced
Exam dates, policies, scoring facts, experience requirements, and official preparation-material details are linked to the relevant primary source. Community estimates are not presented as official facts. Product statements are checked against features that are currently available.
What practitioner review means
A named practitioner review means the person reviewed the final public claims and reasoning on the pages where that attribution appears. It does not imply that the reviewer wrote every page or reviewed pages without a visible attribution. The current named reviewer is listed on the practitioner profile.
How AI-assisted drafting is handled
AI tools may assist with drafting, classification, or consistency checks. Public facts, product claims, and practitioner attribution still require source review and human approval. AI output is not treated as a source.
Corrections and update cadence
Pages with volatile claims are rechecked when an authoritative source changes and on their scheduled review date. Readers can report an issue at support@certarc.com. A correction is assessed against the source and applied to every affected page.
What CertArc will not publish
- Copied, recalled, or reconstructed exam questions.
- Claims of access to confidential exam material.
- Unqualified pass-rate or outcome guarantees.
- Credentials or reviewer relationships that have not been approved.
- Product capabilities that are planned but not available.