Duration
CISSP-ISSMP (Information Systems Security Management Professional)
5 days
Overview
The CISSP-ISSMP (Information Systems Security Management Professional) course is an advanced certification for experienced information security professionals, specifically focusing on the management aspects of information security. It is designed to provide learners with the skills and knowledge needed to lead, design, and oversee an organization's information security program. The course covers a wide range of topics, including leadership and business management, emphasizing the integration of information security into the company's culture and governance. Lessons on information security strategies, data classification, and security policy framework prepare learners to address complex security challenges within their organizations. Through systems lifecycle management, the training ensures that participants understand how to incorporate security into the System Development Lifecycle
(SDLC) and manage the associated risks. The course also delves into compliance and contingency management, teaching how to develop effective contingency plans and understand the legal and ethical implications of information security. By completing CISSP-ISSMP training, learners will be equipped with the tools to develop robust security policies, manage risk effectively, and ensure their organizations are compliant with relevant laws and regulations, making them valuable assets in the field of information security management.
Outline
Leadership and Business Management.
Security’s Role in the Organization’s Culture, Vision, and Mission
Organizational Governance
Information Security Strategies
Data Classification
Security Policy Framework
Security Requirements in Contracts and Agreements
Risk Management Program
Systems Lifecycle Management.
Integration of Security into the System Development Lifecycle (SDLC)
New Business Initiatives and Security Architecture
Vulnerability Management Programs
Course Outline ::CISSP-ISSMP::
Risk or Compliance Management.
Organizational Security Policies and Procedures
Compliance Framework Exceptions
Internal and External Audit Process
Contingency Management.
Contingency Plans
Recovery Strategies
BCP and DRP plans
Law, Ethics and Security Compliance Management.
Information security laws
Security incident management process
Programme scope, delivery arrangements and suitability are confirmed during enquiry.