ISACA · Free, ad-free audio course
A structured, audio-first learning route for ISACA CISM, designed for focused review and practical understanding.
PUT IT INTO PRACTICE
Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.
Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.
Companion Books
The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.
Study Guide
Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.
Flashcards Book
Use the flashcards book for active recall, terminology checks, rapid review, and repeated practice across the course objectives.
Complete Lesson Directory
Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.
71 lessons available
Getting Started
Listen to Welcome to the CISM Certification – Overview and Benefits in the ISACA CISM audio course.
Getting Started
Listen to Understanding the Exam – Domains, Structure, and Study Strategies in the ISACA CISM audio course.
Getting Started
Listen to CISM vs. CISSP vs. CRISC – Choosing Your Certification Path in the ISACA CISM audio course.
Getting Started
Listen to Essential Skills and Experience for CISM Candidates in the ISACA CISM audio course.
Getting Started
Listen to Building a Personalized CISM Study Plan in the ISACA CISM audio course.
Getting Started
Listen to Test-Taking Strategies and Exam-Day Tips for Success in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Organizational Culture and Its Impact on Security in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Legal and Regulatory Compliance Essentials in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Contractual Requirements and Security Agreements in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Organizational Structures, Roles, and Responsibilities in Security Governance in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Developing an Effective Information Security Strategy in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Overview of Major Governance Frameworks (COBIT, ISO, NIST) in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Deep Dive into COBIT Framework in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Deep Dive into ISO 27001 and ISO 27002 in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Deep Dive into NIST Cybersecurity Framework (CSF) in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Strategic Planning Essentials – Budgets, Resources, and the Business Case in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Current Cyber Threat Landscape in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Identifying and Managing Emerging Risks (AI, Quantum, IoT) in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Conducting Vulnerability and Control Deficiency Analysis in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Quantitative vs. Qualitative Risk Assessment in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Conducting Effective Risk Analysis Workshops in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Risk Mitigation and Acceptance Strategies in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Risk Transfer and Avoidance Strategies in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Establishing Risk and Control Ownership in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Best Practices in Risk Monitoring and Reporting in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Staffing and Managing Security Teams in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Selecting and Implementing Security Tools and Technologies in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Information Asset Identification and Classification Fundamentals in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Applying Industry Standards and Frameworks to Your Security Program in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Developing Effective Security Policies in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Writing Actionable Procedures and Guidelines in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Developing and Using Information Security Program Metrics in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Designing and Selecting Effective Information Security Controls in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Implementing and Integrating Information Security Controls in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Techniques for Information Security Control Testing and Evaluation in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Developing Engaging Information Security Awareness and Training Programs in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Vendor Risk Assessment and Selection in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Contractual Security Requirements and Ongoing Vendor Monitoring in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Communications and Reporting for the Information Security Program in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Designing and Documenting the Incident Response Plan in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Maintaining and Updating Your Incident Response Plan in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Conducting Business Impact Analysis (BIA in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Building Your Business Continuity Plan (BCP) in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Designing Your Disaster Recovery Plan (DRP) in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Testing, Maintenance, and Improvement of Your DRP in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Incident Classification and Categorization Methods in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Training, Testing, and Evaluating Your Incident Management Capabilities in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Incident Management Tools and Techniques in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Incident Investigation Methodologies in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Digital Forensics and Evidence Collection Basics in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Effective Incident Containment Methods in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Incident Response Communications: Reporting, Notification, and Escalation in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Techniques for Incident Eradication in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Techniques for Secure Recovery and Restoration in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Conducting Meaningful Post-Incident Reviews in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Identifying Internal and External Influences on Security Strategy in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Establishing Information Security Strategy Aligned with Organizational Goals in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Implementing Information Security Governance Frameworks in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Integrating Information Security into Corporate Governance in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Building Effective Security Budgets and ROI Analysis in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Communicating the Business Case and Gaining Stakeholder Buy-In in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Gaining Senior Leadership Commitment and Stakeholder Support in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Defining and Communicating Security Roles and Responsibilities in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Compiling and Presenting Effective Security Reports in the ISACA CISM audio course.
Domain 1 · Information Security Governance
Listen to Evaluating and Reporting Information Security Metrics in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Aligning Security Programs with Operational Business Objectives in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Integrating Security Requirements into Organizational Processes in the ISACA CISM audio course.
Domain 3 · Information Security Program
Listen to Managing and Monitoring Security Compliance with External Parties in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Supervising Risk Identification and Assessment in the ISACA CISM audio course.
Domain 2 · Information Security Risk Management
Listen to Supervising Risk Treatment and Continuous Monitoring in the ISACA CISM audio course.
Domain 4 · Incident Management
Listen to Continuous Improvement through Post-Incident Reviews and Risk Reassessment in the ISACA CISM audio course.
Try another term or clear one of the filters.
A Practical Study Routine
Use the free audio course during a commute, walk, workout, or focused study session.
Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.
Use the flashcards book to practice active recall and quickly revisit weak areas.
Related Magazine Features
Related Cyber Wiki
AI control operating effectiveness evaluates whether an appropriately designed control performed consistently, by the right people or automation, throughout the period under review.
AI risk managementAI risk reassessment triggers are defined events that require risk assumptions, ratings, controls, and approvals to be reviewed before normal cadence.
AI risk managementAI risk scenario analysis describes a plausible chain from threat, vulnerability, error, misuse, or change through affected assets, stakeholders, and consequences.
AI risk managementAI risk treatment tracking follows mitigation, transfer, avoidance, acceptance, or pursuit decisions from approval through implementation and validation.
AI security managementAI security metrics governance defines which measures support decisions, how they are calculated, who owns them, and how limitations and thresholds are communicated.
AI architectureAI shared-responsibility mapping assigns control duties across model providers, cloud platforms, application teams, data owners, users, and oversight functions.
