Certification · CISM · Released October 2026

CISM 2027 Question Bank: 300 Practice Questions by Kai London

CISM asks you to think like an information security manager balancing business goals and risk. This question bank covers all four domains with scenario-based questions and explanations that show why the best answer is best.

What the book covers

Information security governance

Strategy, roles and alignment with business objectives.

Information security risk management

Assessment, treatment and reporting of risk.

Security programme

Building and running the security programme.

Incident management

Preparation, response and recovery.

Mixed practice exams

Full-length sets to build pacing and confidence.

Final review

High-yield summaries for the last week before the exam.

This is an independent study aid. It is not affiliated with, sponsored or endorsed by ISACA; exam names are trademarks of their owners. Always check the current official exam outline.

CISMPractice questionsSecurity managementCertification

Who it is for

CISM candidates, security managers and study groups.

About the author

Professor Kai London — CISSP, CISM.

An internationally recognised cybersecurity executive, board advisor and Founder & CEO of Quantum AI Systems Security LLC, writing at the convergence of AI, governance and operational resilience. Honorary Professor and Researcher at UCL.