Certified Information Security Manager (CISM) Training

Module 1: Information Security Governance:

Ø Create, maintain, and integrate an information security plan with corporate governance.

Ø Determine the organization's internal and external factors.

Ø Specify your roles and duties.

Ø Create, track, assess, and report metrics.

Module 2: Information Risk Management and Compliance:

Ø Create a procedure for the ownership and classification of information assets.

Ø Determine the organizational, legal, and other criteria that apply.

Ø Make sure to perform threat analysis, vulnerability assessments, and risk assessments on a regular basis.

Ø Choose the best possible risk treatment solutions.

Ø Examine the controls for information security.

Ø Determine the difference between the intended and actual risk levels.

Ø Information risk management should be incorporated into IT and business operations.

Ø Observe current risks

Ø Information risk modifications and noncompliance with reports

Module 3: Information Security Program Development and Management:

Ø Create and manage the program for information security.

Ø Determine, gather, oversee, and specify the needs for both internal and external resources.

Ø Create and manage architectures for information security.

Ø Create, disseminate, and uphold organizational information security policies, practices, and standards.

Ø Create and uphold an information security awareness and training program.

Ø Include information security requirements in contracts and third-party operations, as well as organizational processes.

Ø Create, track, and report operational and program management metrics on a regular basis.

Module 4: Information Security Incident Management:

Ø Create and uphold a hierarchy of severity and organizational definition for information security incidents.

Ø Create and keep an incident response strategy in place.

Ø Create and put into place procedures that guarantee prompt identification of information security incidents.

Ø Create and maintain procedures for examining and recording information security events.

Ø Create and maintain notification and escalation procedures for incidents.

Ø Assemble, prepare, and outfit teams to handle information security issues with efficiency.

Ø Periodically test and evaluate the incident response plan

Ø Create and manage procedures and strategy for communication.

Ø Establish and maintain integration between the business continuity, disaster recovery, and incident response plans by conducting post-event evaluations. 

You need have at least 5 years of information security experience in at least one of the following roles in order to succeed in this course and pass the CISM exam:

Ø IT consultant, auditor, or manager

Ø Security policy writer

Ø Privacy Officer

Ø Information security officer

Ø Network administrator

Ø Security device administrator

Ø Security engineers

Ø Similar role