Certified Information Security Manager (CISM) Training Course

The CISM Review Course is an intensive, four-day review program to prepare individuals who are planning to sit for the Certified Information Security Manager (CISM) exam.

The course focuses on the key points covered in the CISM Review Manual 15th Edition and includes class lectures, group discussions/activities, exam practice and answer debrief. 

This training course equips professionals with the knowledge and skills for proficiency in information security management. It also helps in passing the certification examination successfully.

Certified Information Security Manager (CISM) training course prepares delegates for CISM certification that indicates expertise in information security governance, programme development & management, incident and risk management.

Certified Information Security Manager (CISM) training course helps prepare for CISM exam that tests credibility of delegates as an expert in IS/IT audit, control and information security. This course elevates delegates within their organizations and helps them stand out in the hiring and promotion process. 

Throughout Tecknologia’s Certified Information Security Manager (CISM) training course, our experienced instructors will guide delegates through the critical concepts needed to master the CISM exam. Tecknologia instructors will also guide the delegates on how to approach the CISA exam when attempted. 

With this 4 days Certified Information Security Manager (CISM) training course candidates should expect to gain competencies in the following areas:

• Information Security Governance
• Information Risk Management
• Information Security Program Development and Management
• Information Security Incident Management.

Highlights:

• Based on official CISM syllabus by ISACA
• Industry experienced consultants as trainers
• Learn Information Security Management & prepare for exam in 4 days

Course Outline:

• Course trainer will cover following areas for the Certified Information Security Manager (CISM) course:
• Domain 1: Information Security Governance
• Information Security Governance Overview
• Effective Information Security Governance
• Roles and Responsibilities
• Risk Management Roles and Responsibilities
• Governance of Third-party Relationships
• Information Security Governance Metrics
• Information Security Strategy Overview
• Information Security Strategy Objectives
• Determining the Current State of Security
• Information Security Strategy Development
• Strategy Resources
• Strategy Constraints
• Action Plan to Implement Strategy
• Information Security Program Objectives
• Domain 2: Information Risk Management
• Risk Management Overview
• Risk Management Strategy
• Effective Information Risk Management
• Information Risk Management Concepts
• Implementing Risk Management
• Risk Assessment and Analysis Methodologies
• Risk Assessment
• Information Asset Classification
• Operational Risk Management
• Third-party Service Providers
• Risk Management Integration With Life Cycle Processes
• Security Control Baselines
• Risk Monitoring and Communication
• Domain 3: Information Security Program Development and Management
• Information Security Program Management Overview
• Information Security Program Objectives
• Information Security Program Concepts
• Scope and Charter of an Information Security Program
• The Information Security Management Framework
• Information Security Framework Components
• Defining an Information Security Program Road Map
• Information Security Infrastructure and Architecture
• Architecture Implementation
• Security Program Management and Administrative Activities
• Security Program Services and Operational Activities
• Controls and Countermeasures
• Security Program Metrics and Monitoring
• Common Information Security Program Challenges
• Domain 4: Information Security Incident Management
• Incident Management Overview
• Incident Response Procedures
• Incident Management Organization
• Incident Management Resources
• Incident Management Objectives
• Incident Management Metrics and Indicators
• Defining Incident Management Procedures
• Current State of Incident Response Capability
• Developing an Incident Response Plan
• Business Continuity and Disaster Recovery Procedures
• Testing Incident Response and Business Continuity/Disaster Recovery Plans
• Executing Response and Recovery Plans