CISM

The Certified Information Security Manager (CISM) certification by ISACA was uniquely designed for cyber security management. This certification ensures that global cyber security and information assurance managers are equipped to prepare their organization with security and assurance best practices throughout all reaches of the organization that interact with any data systems.

The CISM is ANSI accredited and has a global position as a leader in the field of information assurance management. The CISM is intentionally limited by ISACA and the exam is only offered in certain locations, a few times per year. This exclusivity helps to protects the certification’s exclusivity.

Who Should Attend?

• CISM certification is a globally recognized professional requirement in the IT Security domain. This certification is most suited for:
• Security Consultant/Manager
• IT Director/Manager
• Security Auditor/Architect
• Security Systems Engineer
• Chief Information Security Officer
• Information Security Managers
• IS/IT Consultants
• Chief Compliance/Privacy/Risk Officers

Course Content:

• Introduction
• Certified Information Security Manager (CISM) Course Intro
• Certified Information Security Manager (CISM) Exam Module
• Module 01 - Information Security Governance
• An Introduction to Information Security Governance
• The Role of Information Security within an Organization
• Confidentiality, Integrity and Availability: The C-I-A Triad
• Information Security Governance
• Secure Network Design Concepts
• Securing the Local Area Network (LAN)
• Access Control Models
• Cryptography
• Hybrid Cryptography in SSL/TLS
• Digital Certificates
• Information Security Governance and the Law
• Export/Import Restrictions
• Module 02 - Risk Management
• An Overview of Risk Management
• Risk Related Definitions
• The NIST 800-30 of Risk Assessment
• Additional Risk Terms
• Module 03 – Security Architecture
• An Overview of Information Security Program Management
• Security Models
• Evaluation Criteria
• Additional Evaluation Criteria
• Technical Project Management
• Module 04 - Information Security Management
• An Overview of Information Security Management
• Service Level Agreements
• Configuration Management and Change Control
• Monitoring and Auditing
• Module 05 - Incident Response and Business Continuity
• An Overview of Incident Response and Business Continuity
• Intrusion Detection Systems
• Security Incident Response
• Business Continuity and Disaster Recovery
• Business Continuity Sub-Plans
• Recovery Strategies