CISM – Certified Information Security Manager

Information Security Governance

• Enterprise governance overview
• Organizational culture, structures, roles, and responsibilities
• Legal, regulatory, and contractual requirements
• Information security strategy
• Information governance frameworks and standards
• Strategic planning

Information Security Risk Management

• Risk and threat landscape
• Vulnerability and control deficiency analysis
• Risk assessment, evaluation, and analysis
• Information risk response
• Risk monitoring, reporting, and communication

Information Security Program

• IS program development and resources
• IS standards and frameworks
• Defining an IS program road map
• IS program metrics and management
• IS awareness and training
• Integrating the security program with IT operations
• Program communications, reporting, and performance management

Incident Management

• ● Incident management and incident response overview
• ● Incident management and response plans
• ● Incident classification and categorization
• ● Incident management operations, tools, and technologies
• ● Incident investigation, evaluation, containment, and communication
• ● Incident eradication, recovery, and review
• ● Business impact and continuity
• ● Disaster recovery planning
• ● Training, testing, and evaluation