CISM Course Goals

Prepare for and pass the Certified Information Security Manager (CISM) exam
Develop an information security strategy and plan of action to implement the strategy
Manage and monitor information security risks
Build and maintain an information security plan both internally and externally
Implement policies and procedures to respond to and recover from disruptive and destructive information security events

CISM Certification Domain 1 – Information Security Governance

Establish and maintain an information security strategy, and align the strategy with corporate governance
Establish and maintain an information security governance framework
Establish and maintain information security policies
Develop a business case
Identify internal and external influences to the organization
Obtain management commitment
Define roles and responsibilities
Establish, monitor, evaluate, and report metrics

CISM Certification Domain 2 – Information Risk Management and Compliance

Establish a process for information asset classification and ownership
Identify legal, regulatory, organizational, and other applicable requirements
Ensure that risk assessments, vulnerability assessments, and threat analyses are conducted periodically
Determine appropriate risk treatment options
Evaluate information security controls
Identify the gap between current and desired risk levels
Integrate information risk management into business and IT processes
Monitor existing risk
Report noncompliance and other changes in information risk

CISM Certification Domain 3 – Information Security Program Development and Management

Establish and maintain the information security program
Ensure alignment between the information security program and other business functions
Identify, acquire, manage, and define requirements for internal and external resources
Establish and maintain information security architectures
Establish, communicate, and maintain organizational information security standards, procedures, and guidelines
Establish and maintain a program for information security awareness and training
Integrate information security requirements into organizational processes
Integrate information security requirements into contracts and activities of third parties
Establish, monitor, and periodically report program management and operational metrics

CISM Certification Domain 4 – Information Security Incident Management

Establish and maintain an organizational definition of, and severity hierarchy for, information security incidents
Establish and maintain an incident response plan
Develop and implement processes to ensure the timely identification of information security incidents
Establish and maintain processes to investigate and document information security incidents
Establish and maintain incident escalation and notification processes
Organize, train, and equip teams to effectively respond to information security incidents
Test and review the incident response plan periodically
Establish and maintain communication plans and processes
Conduct post-incident reviews
Establish and maintain integration among the incident response plan, disaster recovery plan, and business continuity plan about our public and private training options

Are several of your employees or team members preparing for certification exams? Would you like them to attend training in your office? How about tailoring training to your team’s unique needs?  Our Private On-Site Training may be just what you need. It’s convenient, it’s very cost-effective, and we can tailor training to your exact needs.  Our award-winning methodology for on-site training gives your team the best opportunity to learn industry best concepts and practices.