averageguy72 wrote: » Took the CISM on 12/16, provisionally passed. Received the official pass and score report today (12/26). The test took about 1.5 hrs to complete. Scaled score 613 Information Security Governance 574 Information Risk Management and Compliance 644 Information Security Program Development and Management 598 Information Security Incident Management 637Preparation I bought the manual but after reading a few pages I feel like the book would be better as a reference than a review source, it's pretty dry. Instead, based on trying to read the manual and advice often given here, I used the Q&E database as my only preparation. From my experience, I'd say maybe 20% of the actual exam questions were similar to the Q&E database questions.Thoughts Overall, I thought the Q&E practice questions and exam were pretty straight forward. Now to submit the paperwork.