CISM Exam Guide 2027 by Kai London
This exam guide takes you through the knowledge CISM expects, area by area, in clear language — with worked examples, exam tips and practice questions so you can check your progress as you go.
What the book covers
Information security governance
Strategy, roles and alignment with business goals.
Information security risk management
Assessing, treating and reporting risk.
Information security programme
Building and running the security programme.
Incident management
Preparation, response and recovery.
The manager's mindset
How CISM expects you to reason through scenarios.
Practice and review
End-of-chapter questions with explanations, plus a final review checklist.
This is an independent study aid. It is not affiliated with, sponsored or endorsed by ISACA; exam names are trademarks of their owners. Always check the current official exam outline.
Who it is for
CISM candidates and security managers.
About the author
Professor Kai London — CISSP, CISM.
An internationally recognised cybersecurity executive, board advisor and Founder & CEO of Quantum AI Systems Security LLC, writing at the convergence of AI, governance and operational resilience. Honorary Professor and Researcher at UCL.