How do I maintain my CISM?

1. Earn and report CPE annually: A minimum of 20 CPE hours must be reported annually and be appropriate to the readiness of the CISM’s knowledge or ability to perform CISM-related tasks. The use of these hours towards meeting the CPE requirements for multiple ISACA certifications is permissible when the professional activity is applicable to satisfying the job-related knowledge of each certification. HOW TO EARN CPE >
2. Earn and report over 3 years: You must earn and report a minimum of 120 CPE hours related to CISM during a three-year reporting period. HOW TO REPORT CPE >
3. Pay the CISM annual maintenance fee (US$45 for members, US$85 for non-members)
4. Comply with the Annual CPE Audit if selected
5. Comply with ISACA’s Code of Professional Ethics

Failure to comply with these certification requirements will result in revocation of an individual’s CISM designation. In addition, as all certifications are owned by ISACA, the certification must be destroyed immediately if revoked.

To maintain your CISM, you must complete payment of the annual maintenance fee. This payment is due annually by 1 January and is required to renew through the upcoming calendar year. For example, to renew through the end of the current year, the current year's maintenance fee must be paid by 1 January of the current year.

Invoice notifications are sent both via email and through the post beginning in September for the following year. A payment button will be available within your Certification Dashboard any time that fees are due.

The cost of the annual maintenance fee is US$45 for ISACA members and US$85 for non-members. Once you hold more than two ISACA certifications, the cost to renew your 3^rd (4^th, 5^th, etc.) certification is reduced to US$25 for ISACA members and US$50 for non-members.

PAY ANNUAL MAINTENANCE FEE >

Those randomly selected for a CPE audit must provide supporting documentation of all reported activities from a specific calendar year. Those individuals who do not comply with the audit will have their CISM certification revoked.

Recordkeeping
Documentation should be retained for 12 months following the end of each 3-year reporting cycle. Documentation should be in the form of a letter, certificate of completion, attendance roster, Verification of Attendance form or other independent attestation of completion. At a minimum, each record should include the name of the attendee, name of the sponsoring organization, activity title, activity description, activity date, and the number of CPE hours awarded or claimed.

CURRENTLY BEING AUDITED? LEARN MORE >

Members of ISACA and/or holders of the CISM designation agree to a Code of Professional Ethics to guide professional and personal conduct.

VIEW ISACA’S CODE OF PROFESSIONAL ETHICS >

Once you have earned your CPE hours, it is time to get them reported towards your ISACA certification(s).

CPE hours earned and tracked through ISACA will be pre-loaded into your account. Before these CPE hours are counted towards your requirements, you must apply them. Here are the steps to apply your pre-loaded CPE earned from ISACA:

1. Log-in at h04.v6pu.com/myisaca
2. Click on Certifications & CPE Management
3. Click on the button to Report and Manage CPE for any certification that you hold
4. If you have pre-loaded CPE in your account that are unapplied, you will see a section titled, “Unapplied CPE Hours”. Under the “Actions” column, click the link to “Apply”
5. The CPE details will be pre-populated, you will only need to enter the number of CPE to add towards each certification that you hold. Each pre-loaded CPE event will have a maximum number of hours allowed to report.
6. Click Save & Close, and you will now see that event listed under your CPE Hours Applied to Certification section

CPE hours earned through Chapters and other sponsoring organizations will require you to self-report the activity to ISACA. This requires the following simple steps:

1. Log-in at h04.v6pu.com/myisaca
2. Click on Certifications & CPE Management
3. Click on the button to Report and Manage CPE for any certification that you hold
4. Click on the button to Add New CPE Record
5. Fill out the details of the CPE activity. This includes a title or description of the event, the sponsoring organization, a start and end date from when it was earned, and the appropriate qualifying activity.
6. Enter the number of CPE earned for each ISACA certification that you hold
7. Click Save & Close or Save & Add More if you have additional CPE to report

LEARN MORE ABOUT REPORTING CPE >

ISACA offers a Non-Practicing and a Retired status for individuals who qualify. To learn more information regarding who qualifies, how to apply and other requirements, please visit the Certification Status Options page.

Individual use of the CISM logo (on items such as business cards, web sites, marketing or promotional materials) is not permitted because it can imply endorsement or affiliation on ISACA’s behalf of that person’s products or services. Individuals can use the CISM acronym after their name (e.g., John Q. Customer, CISM in lieu of the logo).

Certified individuals who fail to comply with the CPE Policy will have their credential revoked, will no longer be allowed to present themselves as a certified individual, and will be reported as such on requests for confirmation of certification.

Individuals whose certification has been revoked due to non-compliance with the CPE policy may appeal to be reinstated by written notification to the CISA Working Group. The appeal must include a detailed explanation for the reinstatement request as well as the CPE documentation from the cycle period from revocation to current year. Please submit your appeal to the Customer Experience Center.

If the appeal is approved, the individual must pay any outstanding certification maintenance fees plus a US$50 reinstatement fee before being reinstated. If multiple certifications are approved for reinstatement, a US$50 reinstatement fee is incurred for each certification. If the appeal is not approved, to return to active will require re-taking and re-passing the exam. The individual must also re-apply for certification with the appropriate experience.

APPEALS POLICY >