kaiju said: All you need is the CISM Review manual and access to the CISM QA&E DB from Isaca. Thoroughly read the book a couple times and then test your comprehensions with the QA&E DB.