Alta3 Research Logo

Instructor-led training / OV-CISM

Certified Information Security Manager Training Course (ISACAs CISM)

Elevate your career with the Certified Information Security Manager (CISM) course, designed for IT professionals seeking senior management roles in information security governance, risk management, and strategic alignment with organizational goals.
Request private trainingTalk to us
Instructor-led

OV-CISM

Duration
3 Days
Format
Live Online
Access
Multiple Timezones

Overview

About this course.

ISACA’s Certified Information Security Manager® (CISM®) certification indicates expertise in information security governance, program development and management, incident management and risk management. If you are a mid-career IT professional aspiring to senior management roles in IT security and control, CISM can get you the visibility you need.

While there are many certifications focused on the information security practitioner, CISM® provides a unique opportunity to demonstrate qualified security skills and effective business acumen. This course helps students to build or improve an overarching governance program and then support that with effective information security management practices. Experienced instructors bring real-world examples of balancing business needs with security management.

This course will help you successfully join those CISM® colleagues who have demonstrated understanding of effective business management and the knowledge to manage cybersecurity risks to information & technology.

Review this course online at https://www.alta3.com/courses/CISM

Objectives

What you'll learn

  • Design an effective information security governance framework aligned with business objectives.
  • Implement risk management strategies to identify, assess, and mitigate information security risks.
  • Develop and manage an information security program that integrates with organizational processes.
  • Respond to and recover from information security incidents to minimize business impact.

Audience

Who it's for

  • Mid-career IT professionals
  • Security managers
  • Information security governance officers
  • Risk management specialists

Prerequisites

Before you start

Although none is required for the course, obtaining ISACA’s CISM certification requires a minimum of 5 years of professional information security management work experience for certification. Full details regarding CISM requirements (including methods to waive up to 2 years’ experience) is available from the ISACA site.

Outline

Course outline.

Download PDF

Domain 1—Information Security Governance

  1. Information security strategy in alignment with organizational goals and objectives
  2. Establishing an information security governance framework to guide activities
  3. Integrating security governance into corporate governance to support enterprise goals
  4. Effective management of information security policies
  5. Gaining and maintaining enterprise leaders through business cases and ongoing business communication
  6. Ways to establish, monitor, evaluate and report key information security metrics

Domain 2—Information Risk Management

  1. Information asset classification to ensure proportional risk management
  2. Ways to ensure risk assessments, vulnerability assessments, and threat analyses
  3. Appropriate risk treatment/response options based on organizational risk appetite
  4. Planning and applying security controls for information and technology
  5. Integration of information risk management into business and IT processes
  6. Monitoring organizational risk conditions for internal and external factors
  7. Adjusting to evolving risk conditions
  8. Ongoing reporting and risk communication with senior management

Domain 3—Information Security Program Development and Management

  1. Establish and/or maintain the information security program
  2. Identify, acquire and manage resources for the information security program
  3. Establish and maintain information security processes and resources
  4. Establish a program for information security awareness and training
  5. Integrate information security requirements into organizational processes
  6. Establish, monitor and analyze program management and operational metrics

Domain 4—Information Security Incident Management

  1. Establish and maintain an organizational definition of information security incidents
  2. Establish and maintain an incident response plan
  3. Develop and implement processes for timely identification and investigation of incidents
  4. Establish and maintain processes to investigate and document incidents
  5. Apply team-building and communication skills for incident notification and escalation
  6. Organize, train and equip incident response teams
  7. Test, review and improve the incident response plan periodically
  8. Establish and maintain communication plans and processes for managing communication
  9. Conduct post-incident reviews for root causes and corrective actions
  10. Establish integration among incident response, business continuity, and disaster recovery plans

For teams

Training a whole team?

Request private training for Certified Information Security Manager Training Course (ISACAs CISM) and we'll follow up with a quote for your group.

Request a quoteBrowse the catalog