WGU-CISM ISBN: 978-1-61691-857-6

CISM - Certified Information Security Manager

The ISACA's CISM certification is an industry recognized credential. The certification is proof of a person's competence across a spectrum of skills to design, build and manage enterprise information security.

The CISM exam is a standalone certification from ISACA with the exam code CISM.

The certification is targeted at professionals who manage designs, oversees and assesses an enterprise's information security. The CISM program is developed particularly for experienced information security managers and those who have information security management responsibilities. Individuals earning the CISM certification become part of a best peer network, attaining a one-of-a-kind credential. Those who hold this designation join a network of professionals known for their expertise in information security management, IT governance and risk management.

Expert Self-paced · 1 year access 4.4/5 (52 Reviews)

01 / About

About This Course

Try Free → No credit card required

Target Career Roles

Information Security Consultant
Information Security Manager
Senior Security Consultant
Senior Security Analyst

02 / Lessons & labs

See exactly what you will learn and practice

Download outline (PDF)

Lessons

6 Interactive Lessons · 91 topics

01 Information Security Governance 9 topics

Security Strategy
Information Security Governance framework
Integrating security governance into corporate governance
Security Policies: standards, procedures, and guidelines
Business cases to support investments
Internal and external influences on information security strategy
Management and other stakeholder commitment
Roles and Responsibilities
Measuring the effectiveness of the information security strategy

02 Information Risk Management and Compliance 7 topics

Information asset classification
Risk management, assessments, vulnerability assessments and threat analyses
Risk treatment options
Manage risk of noncompliance
Information security controls
Current and desired risk levels: Gap analysis
Monitoring risk

03 Information Security Program Development and Management 9 topics

Alignment of IS program with information security strategy
Information security manager's role and responsibilities in alignment
Information security frameworks
Information security architectures
Evaluating the effectiveness and efficiency of the IS program
Integrating the IS program with IT processes
Integrating the IS program into contracts and activities of third parties
Controls and countermeasures
Security Program Metrics and Monitoring

04 Information Security Incident Management 6 topics

Organizational definition and severity hierarchy for security incidents
Incident response plan
Processes for timely identification
Testing and review
Investigating and documenting information security incidents
Integration of incident response plan, disaster recovery plan and business continuity plan

05 ITPROTV Video Tutorials 5 topics

Introduction
Information Security Governance
Information Risk Management and Compliance
Information Security Program Development and Management
Information Security Incident Management

06 Video Tutorials 55 topics

Introduction
Information Security Threats, Management, And Protection
Security Compliance And Strategy
Business Functions And Policies
Security Standards, Activities, And Strategy Development
Information Security Governance Framework
Regulatory Requirements And Liability Management
Business Case, Budgetary Reporting Methods And Planning Strategy
Organizational Drivers And Their Impacts
Commitment To Info Security
Management Roles And Responsibilities
Reporting And Communicating
Risks Assessment
Information: Classification, Ownership, And Resource Valuation
Baseline And BIAs
Risk: Countermeasures, Mitigation Strategies, And Life Cycle
Risk: Management And Reporting
Information Security Strategies And Programs
Security Technologies, Cryptography, And Access Controls
Monitoring Tools, Security Programs And Controls
Business Assurance Function And SLAs
Resources, Services, And Skills
Security Architecture, Model, And Deployment
Info Security: Policies, Awareness And Training Programs
Documentation
Organizational Processes
Contracts, Joint Ventures, Business Partners And Customers
Third Parties, Suppliers, And Subcontractors
Info Security Metrics
Goals And Methods Of Evaluating Info Security Controls
Vulnerability
Assessment Tools And Tracking Info Security Awareness Training And Education Programs
Evaluation And Management Metrics
Data Collection, Reviews, And Measurement
Assurance Providers, Line Management, Budgeting, And Staff Management
Facilities And Program Resources
Security Policy, Administrative Processes, And Procedures
Access Control, Access Security Policy Principles, And Identity Management
Authentication, Remote Access And User Registration
Procurement And Enforcing Policy Standard and Compliance
Third Party Relationships
SLAs, SDLC, And Security Enforcement
Maintenance, Monitoring, And Configuration Management
Maintaining Info Security And Due Diligence Activities
Info Access, Security Advice, Guidance, And Awareness
Stakeholders
Testing Info Security Control
Noncompliance Issues And Security Baselines
Incident Response And Continuity Of Operations
Disaster Recovery And Business Continuity Plan
Incident Management And Response Plan
Processes, Requirements, And Plans
Incident Response, Disaster Recovery And Business Continuity Plans
Forensics Procedures And Incident Review Process
Conclusion

03 / Exam details