Registration Scheduling and Fees

Registration Scheduling and Fees

You register for the CISM exam directly through your ISACA account, not through the testing vendor. Registration buys an exam eligibility that you then schedule with PSI, ISACA's delivery partner, choosing either a remote online-proctored session from home or office or an in-person PSI test center. The exam is offered on a continuous (year-round) basis, so there are no fixed exam dates -- you book the next available slot that fits your prep timeline.

Fees you will encounter

An ISACA membership has its own annual dues, but the member exam price plus membership is often close to -- or cheaper than -- the nonmember exam price alone (the gap is US$185), so most candidates join before registering. The registration fee is per attempt and non-refundable: if you fail and retake, you pay it again. Do not confuse the three rows above -- the US$50 application fee is paid only after you pass and apply for the credential, and the US$45/US$85 maintenance fee is an ongoing annual charge once certified.

The scheduling clock that catches people out

Two time limits matter:

• After you register and pay, you have a fixed eligibility window (commonly 12 months from the date of payment) to actually sit the exam. If you let it lapse, the fee is forfeited and you must register and pay again.
• A standalone trap for 2026: your chosen exam date determines which content outline applies (the new outline takes effect 3 November 2026). Lock your date before finalizing study materials.

Rescheduling, cancellation, and conduct

PSI allows rescheduling, but last-minute changes (typically within 48 hours of the appointment) forfeit the fee -- always check the current policy when you book, because windows and penalties can change. On exam day expect strict identity and proctoring rules:

A name mismatch between your ID and your ISACA registration is one of the most common reasons a candidate is turned away, so verify the spelling matches before test day rather than at check-in.

Practical sequence: join ISACA → register and pay → receive eligibility → schedule with PSI for a date that matches both your readiness and the correct content outline → confirm ID and environment requirements a few days ahead → run a system check if testing online. Treating registration as a managed project -- with a target date, an ID check, and a buffer for rescheduling -- is itself good CISM practice, and it mirrors the planning discipline the exam expects you to apply to a security program.

Budget the full picture too: a single member candidate who passes on the first try spends roughly US$575 for the exam plus US$50 to apply, before any membership dues or annual maintenance.

Member versus nonmember math

The member discount is large enough that the decision is usually straightforward. The member exam fee is US$185 lower than the nonmember fee, and members also pay lower annual maintenance (US$45 versus US$85) once certified. For most candidates, joining ISACA before registering saves money even after dues, and membership unlocks discounted official materials and the QAE database. Run the arithmetic for your situation, but the default for a serious candidate is to join first.

Online proctoring versus a test center

The two delivery modes test the same exam but have different failure modes. Online proctoring is convenient but unforgiving about environment: you need a quiet, private room, a working webcam and microphone, a stable connection, and a desk clear of everything except your computer. The proctor will scan the room and watch throughout, and being interrupted -- a family member entering, a phone ringing -- can pause or void the session. A PSI test center removes the environment risk and the connection risk but requires travel and an available seat.

If you are easily rattled by technical hiccups, a test center is the lower-variance choice; if you test better at home and can guarantee a clean room, online proctoring saves the commute.

Whichever you choose, do the boring preparation: confirm the ID name match, run the online system check the day before if testing remotely, arrive or log in early, and have nothing prohibited within reach. None of this is glamorous, but check-in problems and environment violations end more attempts than content gaps for otherwise-ready candidates.