How Much Does the CISM Exam Cost in 2026? Fees, Discounts, and Hidden Costs

CISM Exam Fee: Member vs Non-Member

ISACA, the credentialing body behind CISM, uses a two-tier pricing model: one price for current ISACA members and a higher price for candidates who are not members at the time of registration. As of 2026, those fees are:

The $185 gap between the two tiers is intentional: ISACA uses the non-member premium to make annual membership ($135–$150 per year depending on your chapter) financially attractive. In many cases, paying for a one-year ISACA membership before registering nets a modest discount overall - more on that math in the membership section below.

The exam is delivered through Prometric testing centers worldwide, as well as remotely through online proctoring (where available). The exam fee is the same regardless of whether you test in a center or online. Rescheduling fees are separate and handled by Prometric directly - canceling or rescheduling within 48 hours of your appointment typically incurs a penalty fee set by Prometric.

The Application Fee Most Candidates Overlook

Passing the CISM exam earns you a passing score - it does not automatically award you the certification. To actually receive the CISM designation, you must submit a formal certification application to ISACA after passing, documenting your five years of qualifying information security work experience (with up to two years waivable through other credentials).

ISACA charges a one-time application processing fee for this step:

This fee is charged once, after you pass the exam and before your certification is formally conferred. It is easy to forget because it comes weeks or months after you've already paid the exam registration fee. Budget for it upfront so it doesn't catch you off guard.

You have five years from the date you pass the exam to submit your application. Most candidates apply promptly, but some who earned their passing score years ago are surprised to find the application fee is separate from what they paid to sit the exam.

Annual Maintenance Fees After You Pass

CISM is not a one-time credential. Maintaining it requires both ongoing CPE hours and an annual maintenance fee paid to ISACA. As of 2026:

These fees are due each year on the anniversary of your certification, for as long as you want to hold the active CISM credential. Over a three-year renewal cycle, that works out to $135 (member) or $255 (non-member) in maintenance fees alone - in addition to the CPE hours required.

For a complete picture of the renewal requirements - CPE categories, deadlines, and what happens if you let your certification lapse - see our CISM Renewal Requirements guide.

Retake Fees: What a Failed Attempt Costs

The CISM has an estimated 50–65% first-time pass rate, which means a meaningful portion of candidates will need at least one retake. ISACA's retake policy:

• You may attempt the CISM up to 3 times per rolling 12-month period
• There is no mandatory waiting period between attempts - you can reschedule as soon as a Prometric seat is available
• Each retake costs the full exam fee ($575 member / $760 non-member) - there is no discounted retake pricing

A candidate who fails twice before passing will have paid $1,150 (member) or $1,520 (non-member) in exam fees alone before earning their score. This is the most significant cost risk in the CISM investment and the strongest argument for taking preparation seriously before sitting the first time.

ISACA provides a domain-level score report after each failed attempt. That report is your most valuable study tool for a retake - it shows which of the four domains pulled your score down, so you can focus study time accordingly rather than reviewing everything equally. See our CISM Retake Policy guide for the full details on how to use that report effectively.

Hidden and Indirect Costs

Beyond the direct ISACA fees, most candidates incur several additional expenses that don't appear on the ISACA invoice:

Study Materials

The most common study stack for CISM candidates includes:

• ISACA Review Manual: approximately $100–$130 (member discount applies)
• ISACA QAE Practice Question Database: approximately $199 (member) / $299 (non-member) for 12 months of access to 1,000+ official questions
• Third-party study guides (Chapple, Hemang Doshi's Udemy course, Sybex): $15–$60 depending on format and whether you catch a sale

A typical study spend ranges from $250 to $500 total, though candidates who already own the Review Manual from a prior attempt can reduce this significantly. Study materials are also more likely to be employer-reimbursable than exam fees, depending on your company's tuition assistance policy.

ISACA Membership

Annual ISACA membership costs approximately $135–$150 per year (individual rate; chapter fees vary). Membership gives you the reduced exam and maintenance rates, discounts on official study materials, and access to the QAE database at a lower price.

Travel and Testing Center Costs

If your nearest Prometric center requires significant travel, add transportation and potentially lodging to your budget. Remote proctoring eliminates this cost but requires a stable internet connection and a clean testing environment at home or in an office - candidates who fail a technical check during online proctoring may lose their appointment without a refund, so this option requires preparation of its own.

Employer-Reimbursed Study Time

This is not a dollar cost but it's a real one: most CISM candidates study 100–200 hours over 3–5 months. Time spent studying is time not spent on other professional development or personal pursuits. If your employer doesn't allow any study time during work hours, budget the personal time cost honestly.

3-Year Total Cost Comparison

Here is what a realistic 3-year total investment looks like for a first-time-pass scenario, with and without ISACA membership:

Add one retake and the totals rise to approximately $1,780 (member) and $2,250 (non-member). These are still modest relative to the salary premium CISM typically commands - a 10–18% pay increase on a $150,000 base pays back the full certification cost in weeks. The full ROI analysis is in our Is CISM Worth It? guide.

How to Reduce the Total Cost

Several practical strategies can meaningfully lower your out-of-pocket spend:

Ask Your Employer to Pay

Many mid-size and large organizations have a tuition assistance or professional development budget that covers certification exam fees and study materials. Security certifications like CISM are easy to justify as a business expense - they directly benefit the employer by raising the credential profile of their security team. Reimbursement requests are far more likely to succeed if you ask before you register, not after. Frame it as: "This certification will help me in [specific job function]; the exam fee is [amount] and I expect to sit in [timeframe]."

Join ISACA Before Registering

If you plan to maintain your CISM long-term, joining ISACA before registering for the exam saves $185 on the exam fee alone (the $760 non-member rate vs. the $575 member rate). Annual membership is approximately $135–$150. In year one the math is close to break-even, but in subsequent years the member discount on annual maintenance adds up. See the membership math section below for the exact calculation.

Pass on the First Attempt

This is the highest-leverage cost reduction available. A second attempt costs more than a year of annual maintenance fees. Spending an extra $100–$200 on quality practice questions before sitting the first time is nearly always a better financial decision than sitting underprepared and paying for a retake.

Use the QAE Database Strategically

ISACA's official QAE practice question database is the single most important study resource, and it has a member price ($199) versus non-member price ($299). If you're going to buy it - and most serious candidates should - do so as an ISACA member.

Check for Group or Chapter Discounts

Some ISACA chapters offer additional discounts on exam fees or study materials for active chapter members. If you are joining ISACA anyway, look into local chapter membership and whether it comes with any exam-specific benefits.

Is ISACA Membership Worth Buying?

The break-even calculation depends on how long you plan to hold the CISM and stay involved in ISACA. Here is the straightforward math for a candidate who does not have membership yet:

By the time you factor in three years of maintenance and the QAE database, joining ISACA saves roughly $285 over going non-member for everything. That said, if you already have access to employer-sponsored QAE access or prefer third-party question banks, the savings shrink. The membership decision is close either way and largely depends on whether you value ISACA's broader professional resources - publications, webinars, chapter networking, and CPE opportunities - beyond the pure cost calculation.

Frequently Asked Questions

What is the CISM exam fee in 2026?

$575 for ISACA members and $760 for non-members. These are registration fees paid to ISACA at the time you schedule your exam through the ISACA portal. Prometric testing center fees are included in this amount - you do not pay Prometric separately to sit the exam (though rescheduling or late-cancellation penalties are charged by Prometric directly).

Are there any CISM exam fee discounts?

The primary discount is the member rate ($575 vs. $760). ISACA occasionally runs promotional pricing for specific periods or in partnership with employer groups - follow ISACA's social channels and their credentialing newsletter if timing is flexible. Some employers negotiate group rates if multiple employees are pursuing CISM simultaneously, so it is worth asking your HR or learning team whether any corporate agreements are in place.

Does the exam fee include study materials?

No. The exam registration fee covers only the right to sit the exam at a Prometric center or online. Study materials - the Review Manual, QAE practice database, and third-party guides - are purchased separately through ISACA's bookstore or third-party vendors.

How much does a CISM retake cost?

The full exam fee: $575 (member) or $760 (non-member) per attempt. There is no discounted retake price. You may retake up to three times in a rolling 12-month period with no mandatory wait between attempts.

What happens if I cancel my CISM exam registration?

ISACA's cancellation and refund policy is time-dependent. Cancellations made well in advance of your appointment typically receive a full or partial refund; cancellations within 48 hours of the scheduled exam typically forfeit the fee. Check ISACA's current refund policy at the time of registration since these terms can change. Rescheduling through Prometric within their allowable window is generally free if done far enough in advance.

Does my employer typically reimburse the CISM exam fee?

Many do, particularly in financial services, healthcare, consulting, and technology sectors where CISM is a recognized business credential. Most corporate tuition assistance programs cover certification exams and study materials as professional development. Approval rates are higher when you request reimbursement proactively - before registration - and tie the certification explicitly to your current or upcoming role responsibilities.

What is the total cost of getting CISM certified, all in?

For a first-time-pass candidate who joins ISACA, the realistic 3-year all-in cost (exam + application + 3 years maintenance + study materials) is approximately $1,100–$1,300. Non-members spending more on study materials can reach $1,400–$1,600 over the same period. The full breakdown with a retake scenario is covered in the CISM Certification Cost guide.

Related Guides