Experience requirement
- Topic
- Experience requirement
- Category
- Certification
- Exam
- CISA & CISM
- Details
Both certifications require five years of relevant work experience. For CISM it must be information security management experience within the CISM job practice areas, gained in the 10 years before you apply. Apply within five years of passing the exam. Check ISACA's current requirements for any substitutions.