Overview
ISACA’s Certified Information Security Manager® certification indicates expertise in information security governance, program development and management, incident management and risk management. If you are a mid to advanced-career IT professional aspiring to senior management roles in IT security and control, CISM can get you the visibility you need. With a Certified Information Security Manager® (CISM®) certification, you’ll learn how to assess risks, implement effective governance and proactively respond to incidents.
Audience
The CISM designation is for Information Security professionals who have 3-5 years of front-line experience with the security of information. This credential is geared towards Information Security managers and those who have information security management responsibilities.
Work experience: Candidates must have a minimum of five years of experience in information security, with at least three years of experience in information security management. The work experience must be gained within the ten-year period prior to the application date.
Day 1
9:00am-10:30am
Module 1: Testing-Taking Tips and Study Techniques*
· Preparation for the CISM exam
· Submitting Required Paperwork
10:30am-10:45pm Morning Break
10:45pm-12:30pm
· Resources and Study Aids
· Passing the Exam the First Time
12:30pm-1:30pm Lunch
1:30pm-3:30pm
Module 2: Information Security Governance*
· Asset Identification
· Risk Assessment
3:30pm-3:45pm Afternoon Break
3:45pm-5:00pm
· Vulnerability Assessments
· Asset Management
Module 3: Information Risk Management*
· Asset Classification and Ownership
· Structured Information Risk Assessment Process
10:30am-10:45pm Morning Break
10:45pm-12:30pm
· Business Impact Assessments
· Change Management
12:30pm-1:30pm Lunch
1:30pm-3:30pm
Module 4: Information Security Program Development*
· Information Security Strategy
· Program Alignment of Other Assurance Functions
· Development of Information Security Architectures
· Security Awareness, Training, and Education
3:30pm-3:45pm Afternoon Break
3:45pm-5:00pm
· Communication and Maintenance of Standards, Procedures, and Other
· Documentation
· Change Control
· Lifecycle Activities
· Security Metrics
Day 3
9:00am-10:30am
Module 5: Information Security Program Management*
· Security Program Management Overview
· Planning
· Security Baselines
· Business Processes
· Security Program Infrastructure
10:30am-10:45pm Morning Break
10:45pm-12:30pm
· Lifecycle Methodologies
· Security Impact on Users
· Accountability
12:30pm-1:30pm Lunch
1:30pm-3:30pm
· Security Metrics
· Managing Resources
3:30pm-3:45pm Afternoon Break
3:45pm-5:00pm
Module 6: Incident Management and Response*
· Response Management Overview
· Importance of Response Management
Day 4
9:00am-10:30am
· Performing a Business Impact Analysis
· Developing Response and Recovery Plans
10:30am-10:45pm Morning Break
10:45pm-12:30pm
· The Incident Response Process
· Implementing Response and Recovery Plans
12:30pm-1:30pm Lunch
1:30pm-3:30pm
· Response Documentation
· Post-Event Reviews
3:30pm-3:45pm Afternoon Break
3:45pm-5:00pm
Module 7: Review and Q&A Session*
Final Review and Test Prep
Programme scope, delivery arrangements and suitability are confirmed during enquiry.