Home Compare CBAP vs CISM

Exam Comparison

CBAP vs CISM

Comparing the IIBA Certified Business Analysis Professional (CBAP) and the ISACA CISM. Both fall under IT Certifications. Both are covered by the IT Management Cert Exam Prep: PMP, CISM, CISA & Java app.

CBAP Overview → CISM Overview →

CBAP vs CISM: At a Glance

Detail CBAP CISM
Full Name IIBA Certified Business Analysis Professional (CBAP) ISACA CISM
Governing Body IIBA ISACA
Number of Questions 120 150
Time Limit 3.5 hours 4 hours
Passing Score 65% (approx 78/120) 450/800
Exam Fee $450 (IIBA members) / $600 (non-members) $575 (ISACA members) / $760 (non-members)
Category IT Certifications IT Certifications
C3RT App IT Management Cert Exam Prep: PMP, CISM, CISA & Java Soon IT Management Cert Exam Prep: PMP, CISM, CISA & Java Soon

Content Areas Compared

CBAP Domains

  • Business Analysis Planning and Monitoring(14%)
  • Elicitation and Collaboration(12%)
  • Requirements Lifecycle Management(15%)
  • Strategy Analysis(13%)
  • Requirements Analysis and Design Definition(30%)
  • Solution Evaluation(16%)

CISM Domains

  • Information Security Governance(17%)
  • Information Security Risk Management(20%)
  • Information Security Program(33%)
  • Incident Management(30%)

Frequently Asked Questions

What is the difference between CBAP and CISM?

The CBAP (IIBA Certified Business Analysis Professional (CBAP)) is administered by IIBA and consists of 120 questions. The CISM (ISACA CISM) is administered by ISACA and consists of 150 questions. Both are IT Certifications credentials.

Can I take both the CBAP and the CISM?

Yes, the CBAP and CISM are separate credentials with separate eligibility requirements. Each is awarded by a different governing body (IIBA and ISACA respectively). Check the official requirements for each before registering.

Which should I take first, CBAP or CISM?

The right sequence depends on your career goals and current credentials. The CBAP is offered by IIBA with a passing score of 65% (approx 78/120), while the CISM is offered by ISACA with a passing score of 450/800. Review the eligibility requirements for each with the respective governing bodies before deciding.

Does C3RT cover both the CBAP and the CISM?

C3RT is building apps for both the CBAP and the CISM. Both will be available on iOS and Mac.

The IIBA Certified Business Analysis Professional (CBAP) (CBAP) is administered by IIBA. The ISACA CISM (CISM) is administered by ISACA. C3RT is not affiliated with either organisation. Certification names and trademarks are the property of their respective owners.