EIEIOTECHNOVATION
← Training programmes

EIEIO / CYBERSECURITY

Certificate in Information Security Management Principles

Course outline

5 days
Discuss this programme →

Duration

5 days

Overview

Our 5-day Certification in Information Security Management Principles (CISMP) course aims to give delegates a foundation level knowledge of Information Security management, including its concepts, approaches, and techniques. The CISMP course is accredited by BCS, The Chartered Institute for IT, a leading company in the IT sector.

The BCS CISMP course is taught by our expert trainers, who have years of experience and will provide the candidates with all the knowledge needed to pass the CISMP examination if all training days are attended. The certification also provides candidates with the ability to improve the use of Information Security management within their organisation, after the course has ended.

As an industry recognised qualification, CISMP provides a perfect starting point for those who want to get into Information Security management, or for those who want to progress within their present role. Therefore, CISMP is an ideal way for candidates to improve their prospects and also their earning potential.

The BCS CISMP course can also be seen to provide a foundational knowledge that delegates can build on with other more specific courses. This will enable the delegate to improve their prospects further. This represents how valuable it could be for candidates to take part in our CISMP course.

Who should attend

CISMP would be beneficial for IT Managers wishing to enhance their knowledge of Information Security. Information Security management team members, Security Coordinators and Administrators, Internal Auditors, and staff responsible for legal and corporate governance will also benefit.

Prerequisites

There are no official prerequisites, but we recommend that candidates have a good understanding of the principles of Information Security. If you do not possess this knowledge, we recommend the BCS recommended book ‘Information Security Management Principles’ to prepare for the course.

Outline

  • The need for, and benefits of, Information Security: Corporate Governance
  • Information risk management
  • Information Security organisation and responsibilities: Legal and regulatory obligations
  • Policies, standards & procedures: Delivering a balanced ISMS, security procedures
  • Information Security governance: Policy reviews, security audits
  • Security incident management: Objectives and stages of incident management
  • Information Security implementation: Getting management buy-in
  • Legal framework: Processing personal data, employment issues, computer misuse, intellectual property rights, Data Protection Act
  • Security standards and procedures: ISO/IEC 27002 and ISO/IEC 15408
  • Threats to, and vulnerabilities of, Information Systems
  • People security: Organisational culture, acceptable use policies
  • Systems development and support: Linking security to the whole business process, change management process, handling security patches
  • Role of cryptography: Common encryption models
  • Protection from malicious software: Methods of control
  • User access controls: Authentication and authorisation mechanisms
  • Networks and communications: Partitioning networks, the role of cryptography, controlling third-party access, intrusion monitoring, penetration testing, cloud computing
  • External services: Protection of Web servers and e-commerce applications
  • IT infrastructure: Operating, network, database, and file management systems
  • Testing, audit, and review: Strategies for security testing of business systems
  • Training: The purpose and role of training, promoting awareness
  • Physical and environmental security: Controlling access and protecting physical sites and assets
  • Disaster recovery and business continuity management: Relationship between risk assessment and impact analysis
  • Investigations and forensics: Common processes, tools, and techniques, legal and regulatory guidelines

BCS CISMP (Certificate in Information Security Management Principles) Examination Information

To complete our CISMP course, candidates must pass the CISMP examination. The examination will take place at the end of the fifth and final day of the course. The exam is:

  • Multiple choice
  • 100 questions
  • 65% pass rate (65/100)
  • 2 hours in duration
  • Closed book

Programme scope, delivery arrangements and suitability are confirmed during enquiry.