The Certified Information Security Manager (CISM) credential does not expire, but in order to keep their current status, holders must take part in continuing professional education (CPE).