This comprehensive course is designed to guide professionals through the process of preparing for and attaining the Certified Information Security Manager (CISM) certification, a globally recognized standard of achievement in information security management. The course is structured around the five key domains of the CISM certification exam: Information Security Governance, Information Risk Management, Information Security Program Development and Management, Information Security Incident Management, and Governance, Risk Management, and Compliance.
Starting with an overview of the CISM certification, the course dives into the benefits of achieving CISM status, emphasizing its role in career advancement, enhanced credibility, and increased earning potential in the field of information security.
In the first domain, learners will explore the concepts of Information Security Governance, focusing on establishing and managing an Information Security Governance Framework, developing and implementing information security strategies aligned with corporate goals, and utilizing metrics and reporting to assess and communicate governance effectiveness.
The second domain explore the Information Risk Management, covering the establishment of a risk management program, risk assessment methodologies, asset classification, and risk response strategies. This section ensures learners can identify, evaluate, and manage information security risks effectively.
The third domain addresses Information Security Program Development and Management, offering insights into integrating security programs into business processes, lifecycle management of information security, and ensuring the security of information systems.
In the fourth domain, participants will learn about Information Security Incident Management, including the development of an incident management program, response procedures, evidence collection, and incident communication strategies.
Information Security Consultant, Senior Penetration tester and Certified Instructor with more than 20 years of experience.
CISSP, CEH, CEI, CISM, CISA, Security+, CCNP, CCSI, MCT, MCSE+ Security, MCITP, PMP, N+, RHCE, Linux+