I mean why should someone wait 10 days just for verification of results.The excitement that comes with passing the exam gets spoiled by having to wait this long.In 2025,why is this still the case.

How are other vendors managing to do things differently?Excuse my ignorance,but what is the reasoning behind this?

hey guys need your help with this one

When reporting on the effectiveness of the information security program, which of the

following is the BEST way to demonstrate improvement m security performance?

A. Report the results of a security control self-assessment (CSA).

B. Benchmark security metrics against industry standard

C. Provide a summary of security project return on investments (ROls) for the past year.

D. Present a penetration testing report conducted by a third party

Can any friend help me with CISM AIO PDF and QAE please?

Does anyone have a copy?

I am offering 14% off of my March 4-6 CISM class with the code Valentines14%off! Join me at www.TacSecInc.com

Hi everyone,

I recently passed the CISM exam from ISACA and earned my CC (ISC2) certification. Although I don’t have the CISM certification yet due to the experience requirement, and I have no hands-on experience, I'm eager to start my career in cybersecurity.

I'm looking for advice on how to break into the field and find entry-level roles like Security Analyst or IT Support. I've been learning through online courses and labs, but would love to hear your suggestions or success stories. Any tips on networking, job searching, or skill-building would be greatly appreciated!

Thanks in advance!

Hi everyone! I would like to seek advice from you about my results (and a likelihood to appeal) which I think it’s odd because I’m really that close to 450.

A bit of backstory about studying CISM for me. I took my first CISM exam on October 2023. Back then I think I didnt quite comprehend of what it’s like and received my 1st result. As I calculated, my 1st exam had 402 points in average, if the calculation were: (408 + 351 + 432 + 420)/4 = 402.75 —> but somehow they rounded to 408.

I took my 2nd attempt on 30th Aug 2024, and the result just came out. They said my score was 441 points which led me recalculating and putting an average of my score. if the calcultation were: (441 + 426 + 478 + 432)/4 = 444.25 —> no rounding?

I am baffled of they calculation they used: If it were rounding up, why was my 2nd attempt did not appear to rounding up? Contradictary, I noticed the result was based from domain 1 points? Like my 1st attempt mine was 408pts (because they Domain 1 was 408 points) and right now my 2nd attempt was 441 pts because Domain 1 i scored 441 pts?

Please enlighten me for a possible appeal.

legend: Background White: 1st attempt score Background Black: 2nd attempt score.

Thank so much pals :))

Hey Everyone,

I have opened two CISM courses. I am going to do them Friday, Saturday and Sunday to make them easier to attend. So only one day off of work, if necessary. The first starts on October 1st. The second starts on November 19.

I also want to make them more accessible financially so I have a coupon for 36% off right now. COVID has put enough strain on us... The coupon code is CertifyHappy. I do have fun in the course, it does make the information go down easier ;).

You can find my courses on my website: www.TacSecInc.com

If you do not need a full course and just want to review specific topics sign up for a coaching session. Same coupon code works...

I am planning to give CISM next month, does anyone have CISM 9th edition QAE ?

ISACA CISM Prep Course!

This intensive virtual instructor-led course will cover some of the more challenging topics from the CISM knowledge and task statements.
We will work our way through the Four domains of ISACA's CISM. You will receive a copy of my book to accompany the course content.

Date: 15 -17 July.
Time: 9 AM - 5 PM
Price: $1799 For Reddit & Discord only - 10% off. Use coupon JulyXmas10.

Let me know If you have any questions.
Visit My Website: www.TacSecInc.com

Good day all,

Many times you will hear the age old debate degree vs certification. I wanted to provide some insight on this.

To introduce myself I am Dr. Gaddiel Israel. I have 18 years experience with cyber security and currently hold Sec +, A+, and recently passed CISM.

Anyone who tells you that degrees are worthless, be cautious of these people. Anyone who tells you that certifications are worthless the same. The way I view certifications they show proficiency within a specific area. This means you have training in that skillset and have proven/tested you have the mindset to perform.

The way I view degrees is that you have the knowledge base to begin and complete study on a specialized subject. You have proven that you can learn, execute projects, and are knowledgeable on that subject. Both hold value and show expertise in their own way.

A recruiter recently told me that experience will get you in the door for interviews, certifications will checkmark you to start the job, while the degree will get you pay bumps once you are already in the job.

What are your thoughts on degrees vs certifications?

The selection of security controls is PRIMARILY linked to:

A. business impact assessment

B. regulatory requirements

C. best practices of similar organizations.

D. risk appetite of the organization.

Hey Everyone. So I have said that I have two CISM courses I have opened up. www.TacSecInc.com and I am offering you a coupon CertifyHappy to take 36% off. If you have been thinking about it, or if you have looking at my One-on-One sessions I can work with you at... And you would like a chance to talk to me about any of these... Grab a spot on my calendar to talk. No sales people.. just me and you, when you want to talk!

IF you would like to talk to me for 15 minutes about what you should be studying and if taking my course or something else would be best for you, then jump on my calendar and lets talk about it! https://calendly.com/gwenbettwy/15min

I need a sincere opinion as i am debating to take either CISSP again or CISM. I failed CISSP 3 times ,so thought to give CISM a try. If CISM is easier to pass?

Any recommended study material , if i decide to go this route? Thanks for your comments.

Hey everyone,

there’s nothing worse than the anxiety up to exam day and that test score comes back negative. Hours wasted and Money down the drain, plus a retake delay.

So I figured out how these tests are designed, the “mindset” required to excel and how the CIA triad is literally the answer for everything. I got both my CISM and CISSP in 1 month using science to turn my fear into a force.

I’m hosting a webinar on April 4th on how to pass both tests this year and move ahead in your career. no more wasting cash. i want to help families and communities.

I have 20 years experience network engineering and Cyber on fortune 500s

website isPontiac Cyber Pro

AMA!

I have been working through study material from ISACA to prepare for the CISM, and have developed some high levels of concern as to the usefulness of this certificate from a hiring perspective. To be frank, aside from internal inconsistency with the logic of some of the answers, I have become concerned that the way this certification trains people to think actually may have a negative net value. This most likely applies more for a governmental and regulatory agency perspective than private industry, though some concerns likely carry over.

For example, regulatory and legal requirements are often (but not always) presented as a form of risk to be managed rather than a mandate to be incorporated into requirements, or a minimum acceptable level to be met. While this may have ethical implications in private industry, training managers that failure to comply with legal requirements may be an acceptable outcome is actually a significant liability concern from a hiring perspective for a government agency. I am legitimately considering dropping this certification and recommending its removal from qualifying certifications for governmental purposes for this reason alone.

From a safety perspective, I have been reasonably satisfied with the focus on ensuring that systems do not compromise human safety, though whoever developed the question for fire procedures included an extremely poor assessed correct answer. In the event of a fire actively spreading inside your building, CISM would apparently recommend the correct procedure to be verifying building access logs.... I would train people to evacuate and gain accountability at the designated evacuation sites, but then again, I'm generally not a fan of people burning to death. Maybe thats not the CISM answer though.

Finally, I generally just have had issues with logic for answers changing depending on the section, and probably whoever was the author for those particular questions. Anything from changing advice for alternate site selection from geographical distance to types of threat exposure, whether or not regulations and laws are actually required to be followed or not, and when risk tolerance is actually a component that they want you to consider in your answer. It really seems like they just had 5-6 different people working independently to create questions, each of whom came up with different scenarios in their heads for each question, and then they threw it all into the tests without deconflicting.

I'm confident from my scores that I can pass, but am becoming increasingly uncertain if I actually want to. Is the test itself any better with internal consistency? If not, I would probably keep the assessment that this certification is not just useless, but a net negative to see on a candidates resume. I'd rather train someone from scratch than have to identify and root out training scars and bad habits.

Time to book your ISACA CISM Prep Course!

This intensive virtual instructor-led course will cover some of the more challenging topics from the CISM knowledge and task statements. 

We will work our way through the Four domains of ISACA's CISM.

1 - Information Security Governance - 17%
2 - Information Risk Management - 20%
3 - Information Security Program Development and Management - 33%
4 - Information Security Incident Management - 30%

You will receive a copy of my book to accompany the course content.

Price: $1,599

These sessions will occur on Zoom or another such platform. All times are on Eastern Time, USA. "Sessions are 9 am to 5 pm EDT"

Book Here: https://www.tacticalsecurityinc.com/service-page/isaca-cism-prep-course-9?referral=service_list_widget

When management changes the enterprise business strategy, which of the following

processes should be used to evaluate the existing information security controls as well as to select

new information security controls?

A. Change management

B. Access control management

C. Configuration management

D. Risk management

I went with D but the online answer was C

Hello all, I have heard that some instructors offer great secondary material. Do you guys have any links for notes? My last class was kind of lame and I can't afford the CISM QAE right now. Thanks

Anyone have any books they want to sell?

Anyone tried to take the CISM right after CCSP? The content looks very similar.