CISM Certification Course and Training | Information Security Manager

It provides detailed knowledge of enterprise governance culture, regulations and structures, allowing analysis, planning and development of security strategies.

• Enterprise Governance: Involves understanding organizational culture, legal, regulatory, and contractual requirements, and defining organizational structures, roles, and responsibilities.
• Information Security Strategy: Covers strategy development, establishing information governance frameworks and standards, and strategic planning for effective information security governance.

It allows analysis of potential security risks, threats, and vulnerabilities, equipping individuals with needed information for management-level risk assessment and mitigation.

• Information Security Risk Assessment: Focuses on identifying emerging risks, analyzing vulnerabilities and control deficiencies, and conducting risk assessments.
• Information Security Risk Response: Includes selecting appropriate risk treatment options, defining risk and control ownership, and monitoring and reporting on risk management efforts.

This domain encompasses the resources, asset classification and frameworks important for managing information security programs such as control design, testing, communication and development.

• Program Development: Encompasses managing resources, classifying information assets, aligning with industry standards and frameworks, and establishing policies, procedures, guidelines, and program metrics.
• Program Management: Involves designing and implementing security controls, conducting testing and evaluation, managing security awareness training, coordinating with external services, and overseeing communications and reporting for the program.

It comes with training in risk management and preparedness, concentrating on incident response, recovery and continuity planning.

• Incident Management Readiness: Prepares candidates to develop an incident response plan, conduct business impact analysis (BIA), and create business continuity and disaster recovery plans. Also covers incident classification, training, testing, and evaluation.
• Incident Management Operations: Teaches the use of incident management tools and techniques, investigation, containment, communication, eradication, recovery, and post-incident review practices.