Introduction:

Delegates of the CISM training will have the skills and knowledge of the core competencies required of a world class information security professional whether planning to sit for the examination or not, the CISM training courses Delegates will have gained this in a structured learning environment. They will have gained the knowledge required for, and have thoroughly prepared for the certification examination in systematic way. Enhance your career with our Certified Information Security Manager (CISM) training course. With recent independent studies consistently ranking CISM as one of the highest paying and sought after IT certifications, it's a great course to help with your professional development. Plus it provides executive management with assurance that you have the required experience to provide effective security management and consulting services. This course is based on the ISACA framework, which has five domain areas that relate to the role of a CISM. You will learn about each of these domains in detail, giving you the knowledge and skills to develop and manage a resilient information security program. This course will prepare you with the knowledge and skills to complete the ISACA CISM multiple choice exam, which will get you Certified Information Security Manager status. The course will feature:

• Information security governance
• Risk management
• Information security program management
• Information security management
• Response management

Course Objectives:

By the end of this course, delegates will be able to:

• Understand how to establish and maintain the necessary frameworks that will ensure information security strategies are aligned with business objectives, and consistent with applicable laws and regulations
• Confidently identify and manage information security risks to achieve business objectives
• Be familiar with industry accepted terminology and practices used by information security professionals
• Gain the necessary knowledge and skills for the ISACA CISM exam
• Demonstrate your understanding of the relationship between an information security program and broader business goals and objectives
• Distinguish yourself as having not only information security expertise, but also knowledge and experience in the development and management of an information security program
• Puts you in an elite peer network
• Identify critical issues and customize company-specific practices to support the governance of information and related technologies
• Bring credibility to the enterprise for which they are employed
• Take a comprehensive view of information systems security management and their relationship to organizational success
• Demonstrate to enterprise customers their commitment to compliance, security and integrity; ultimately contributing to the attraction and retention of customers
• Ensure that there is improved alignment between the organization's information security program and its broader goals and objectives
• Provide the enterprise with a certification for Information security management that is recognized by multinational clients and enterprises, lending credibility to the enterprise

Who Should Attend?

IT Engineers, IT Professionals, IT Directors, Engineers, IT Project Managers, IT Auditors, IT Compliance Managers, IT Coordinators, IT Support Managers, IT Officers, IT Support Specialists, IT System Administration, Technical Support Professionals, Chief Information Officers, Chief Risk Officers, Information Assurance Officers, Program Managers, Network Systems Analysts, Government Program Managers, R&D Project Managers, Software and System Developers, Chief Security Officers, Security Specialists, Chief Information Security Officers, Directors of Security, Security Architects, Security Operation Center Managers, Security Consultants, Security Managers, Security Auditors, Security Directors, Systems Administrators, Incident Response Analysts, Business Owners, Security Analysts, Security Systems Engineer, Network Architect, Operations Managers, Risk Management Professionals, Network Administration Professionals, Application Developers, Application Support Analysts, Application Engineers, Associate Developers, Technology Officers, Information Officers, Help Desk Specialist, Help Desk Technician, Database Administrators, Network Architects, Network Engineers, Network System Administrators, System Analysts, System Architects, System Designers, Information Security Managers or those with management responsibilities, Information Security Staff and other information security assurance providers who require an in-depth understanding of information security management, CISOs, CIOs, CSOs, Privacy Officers, Risk Managers, Security Auditors and compliance Personnel, BCP / DR Personnel, Executive and Operational Managers responsible for assurance functions

Course Outline:

Information Security Governance

• Developing information security strategy to align with business strategy and direction
• Obtaining senior management commitment and support for information security across the entire enterprise
• Defining information security governance roles and responsibilities
• Establishing reporting and communication channels regarding information security governance activities

Risk Management

• Developing a systematic, analytical, and continuous risk management process
• Understanding and implementing risk identification, analysis, and mitigation activities
• Defining and prioritizing risk mitigation strategies
• Appropriately reporting changes in risk to the correct levels of management on a periodic and event-driven basis

Information Security Program Management

• Creating and maintaining plans for implementing a carefully designed information security governance framework
• Developing information security baselines from organizational needs, as well as international standards
• Developing guidelines and procedures for integrating security risk management into business processes
• Developing procedures and guidelines for the IT infrastructure that comply with senior-level information security policies
• Ensuring security is effectively incorporated into the organizations established change management processes
• Effectively integrating information security policies, guidelines, procedures, and accountability into the organization's culture

Legal Issues

• Managing security risk from contracts; transfer risk with contracts
• Understanding information security compliance issues resulting from Sarbanes-Oxley

Information Technology Deployment Risks

• Properly aligning IT strategic planning with organizational strategic planning
• Controlling risk within software development or acquisition projects

IT Management Risks

• How to position information security management within the organization
• Controlling IT security risk relating to IT funding

IT Networks and Telecommunications Risks

• Managing risk associated with social engineering, physical infrastructure threats, malicious code, and software vulnerabilities

Integrating Information Security into Business Continuity, Disaster Recovery, and Incident Response

• Developing and implementing processes for identifying, detecting, and analyzing security-related events, procedures
• Organizing, training, and properly equipping response teams

COURSE LOCATIONS