Duration
4 days
Audience
The CISM designation is for Information Security professionals who have 3-5 years of front-line experience with the security of information. This credential is geared towards Information Security managers and those who have information security management responsibilities.
Module 1: Testing-Taking Tips and Study Techniques*
· Preparation for the CISM exam
· Submitting Required Paperwork
· Resources and Study Aids
· Passing the Exam the First Time
Module 2: Information Security Governance*
· Asset Identification
· Risk Assessment
· Vulnerability Assessments
· Asset Management
Module 3: Information Risk Management*
· Asset Classification and Ownership
· Structured Information Risk Assessment Process
· Business Impact Assessments
· Change Management
Module 4: Information Security Program Development*
· Information Security Strategy
· Program Alignment of Other Assurance Functions
· Development of Information Security Architectures
· Security Awareness, Training, and Education
· Communication and Maintenance of Standards, Procedures, and Other
· Documentation
· Change Control
· Lifecycle Activities
· Security Metrics
Module 5: Information Security Program Management*
· Security Program Management Overview
· Planning
· Security Baselines
· Business Processes
· Security Program Infrastructure
· Lifecycle Methodologies
· Security Impact on Users
· Accountability
· Security Metrics
· Managing Resources
Module 6: Incident Management and Response*
· Response Management Overview
· Importance of Response Management
· Performing a Business Impact Analysis
· Developing Response and Recovery Plans
· The Incident Response Process
· Implementing Response and Recovery Plans
· Response Documentation
· Post-Event Reviews
Module 7: Review and Q&A Session*
Final Review and Test Prep
Programme scope, delivery arrangements and suitability are confirmed during enquiry.