Certified Information Security Manager (CISM)

استعدّ لشهادة CISM من ISACA لمديري أمن المعلومات. خلال أربعة أيام تتناول حوكمة أمن المعلومات

4 أياممتقدّم4 وحداتCertified Information Security Manager® (CISM®)

نظرة عامة

استعدّ لشهادة CISM من ISACA لمديري أمن المعلومات. خلال أربعة أيام تتناول حوكمة أمن المعلومات، وتقييم المخاطر ومشهد التهديدات الناشئة، وبناء البرنامج الأمني وتشغيله، وإدارة الحوادث بما فيها خطط الاستجابة وتحليل الأثر على الأعمال وخطط استمرارية الأعمال.

ما ستتعلّمه

المحتوى التقني أدناه معروضٌ باللغة الإنجليزية كما ورد في منهاج الدورة، حفاظاً على دقّة المصطلحات.

Develop, implement, and manage an enterprise information security program.
Establish governance frameworks for information security policies and procedures.
Conduct risk assessments and implement risk mitigation strategies.
Ensure compliance with industry regulations and legal requirements.
Oversee security incident management and response strategies.
Align information security with business objectives and IT governance.

المنهاج

4 وحدات

Organizational Purpose and Culture
Legal, Regulatory, and Contractual Requirements
Organizational Structures, Roles, and Responsibilities
Information Security Strategy Development
Enterprise Architecture
Information Governance Frameworks and Standards
Strategic Planning

Emerging Risk and Threat Landscape
Vulnerability and Control Deficiency Analysis
Risk Assessment and Analysis
Risk Treatment/Risk Response Options
Risk and Control Ownership
Risk Monitoring and Reporting

Information Security Architecture
Information Security Program Resources
Information Security Industry Standards and Frameworks
Information Security Policies, Standards, Procedures, and Guidelines
Information Asset Identification and Classification
Information Security Control Design and Selection
Information Security Program Metrics Development
Information Security Control Implementation and Integrations
Information Security Control Testing and Evaluation
Information Security Awareness and Training
Management of External Services
Information Security Program Metrics, Communications, and Reporting

Incident Response Plan
Business Impact Analysis (BIA)
Business Continuity Plan (BCP)
Disaster Recovery Plan (DRP)
Incident Classification/Categorization
Incident Management Training, Testing, and Evaluation
Incident Management Tools and Techniques
Incident Investigation and Evaluation
Incident Containment Methods
Incident Response Communications
Incident Eradication and Recovery
Post-incident Review Practice

لمن هذه الدورة

مديرو أمن المعلومات المتمرّسون والمختصون الذين يتولّون مسؤوليات إدارة الأمن.

قبل أن تبدأ

CISM is intended for information security professionals with at least five years of relevant work experience and at least three years in the role of information security manager.

الشهادة