Notes¶ CISM Domain 1 - Information Security Governance (17%) CISM Domain 2 - Information Security Risk Management (20%) CISM Domain 3 - Information Security Program (33%) CISM Domain 4 - Incident Management (30%)