ISACA
Certified Information Security Manager (CISM)
Prepare for CISM, ISACA's credential for information security managers.
4 daysAdvanced4 modulesCertified Information Security Manager® (CISM®)
About this course
Prepare for CISM, ISACA's credential for information security managers. Over four days you will cover information security governance, risk assessment and the emerging threat landscape, building and running a security programme, and incident management with response planning, business impact analysis and continuity planning.
What you'll learn
- Develop, implement, and manage an enterprise information security program.
- Establish governance frameworks for information security policies and procedures.
- Conduct risk assessments and implement risk mitigation strategies.
- Ensure compliance with industry regulations and legal requirements.
- Oversee security incident management and response strategies.
- Align information security with business objectives and IT governance.
Curriculum
4 modules
- Organizational Purpose and Culture
- Legal, Regulatory, and Contractual Requirements
- Organizational Structures, Roles, and Responsibilities
- Information Security Strategy Development
- Enterprise Architecture
- Information Governance Frameworks and Standards
- Strategic Planning
- Emerging Risk and Threat Landscape
- Vulnerability and Control Deficiency Analysis
- Risk Assessment and Analysis
- Risk Treatment/Risk Response Options
- Risk and Control Ownership
- Risk Monitoring and Reporting
- Information Security Architecture
- Information Security Program Resources
- Information Security Industry Standards and Frameworks
- Information Security Policies, Standards, Procedures, and Guidelines
- Information Asset Identification and Classification
- Information Security Control Design and Selection
- Information Security Program Metrics Development
- Information Security Control Implementation and Integrations
- Information Security Control Testing and Evaluation
- Information Security Awareness and Training
- Management of External Services
- Information Security Program Metrics, Communications, and Reporting
- Incident Response Plan
- Business Impact Analysis (BIA)
- Business Continuity Plan (BCP)
- Disaster Recovery Plan (DRP)
- Incident Classification/Categorization
- Incident Management Training, Testing, and Evaluation
- Incident Management Tools and Techniques
- Incident Investigation and Evaluation
- Incident Containment Methods
- Incident Response Communications
- Incident Eradication and Recovery
- Post-incident Review Practice
Who it's for
Experienced information security managers and professionals with security management responsibilities.
Before you start
- CISM is intended for information security professionals with at least five years of relevant work experience and at least three years in the role of information security manager.
Prepares for
Related courses
More in ISACA →Advanced
Certified Information Systems Security Professional (CISSP) Certification
ISC2
View course →Intermediate
CompTIA Security+
CompTIA
View course →Intermediate
EC-Council Certified Ethical Hacker (CEH) v13
EC-Council
View course →Advanced
Advanced in AI Audit (AAIA)
ISACA
View course →Advanced
Advanced in AI Risk (AAIR)
ISACA
View course →Advanced
Advanced in AI Security Management (AAISM)
ISACA
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.