CISM - Certified Information Security Manager
The Certified Information Security Manager (CISM) qualification is an international professional certification offered by ISACA for Information Security Managers. The certification recognises an individual's ability to design, implement and manage an information security programme.
Description
This CISM training course covers the following areas:
- Introduction to Certified Information Security Manager (CISM)
- Objectives and Expectations
- What is Information Security?
- The Goals of Information Security
- Principles for Information Security Professionals
Domain 1 – Information Security Governance
- Introduction to Information Security Governance
- Effective Information Security Governance
- Governance and Third Party Relationships
- Information Security Metrics
- Information Security Governance Metrics
- Information Security Strategy
- Information Security Strategy Development
- Strategy Resources and Constraints
- Other Frameworks
- Compliances
- Action Plans to Implement Strategy
- Governance of Enterprise IT
Domain 2 – Information Risk Management and Compliance
- Information Risk Management
- Risk Management Overview
- Risk Assessment
- Information Asset Classification
- Assessment Management
- Information Resource Valuation
- Recovery Time Objectives
- Security Control Baselines
- Risk Monitoring
- Training and Awareness
- Information Risk Management Documentation
Domain 3 – Information Security Program Development and Management
- Information Security Program Management Overview
- Information Security Program Objectives
- Information Security Program Concepts
- Information Security Program Technology Resources
- Information Security Program Development
- Information Security Program Framework
- Information Security Program Roadmap
- Enterprise Information Security Architecture (EISA)
- Security Program Management and Administration
- Security Program Services and Operational Activities
- Controls
- Security Program Metrics and Monitoring
- Measuring Operational Performance
- Common Information Security Program Challenges
Domain 4 – Information Security Incident Management
- Incident Management Overview
- Incident Management Procedures
- Incident Management Resources
- Incident Management Objectives
- Incident Management Metrics and Indicators
- Defining Incident Management Procedures
- Business Continuity and Disaster Recovery Procedures
- Post Incident Activities and Investigation
- ISACA Code of Professional Ethics
- Laws and Regulations
- Policy Versus Law Within an Organisation
- Ethics and the Internet IAB
- Certified Information Security Manager