Preparation time varies, but most candidates spend three to six months studying for the CISM or CISA exams.