Certified Information Security Manager (CISM)

Understanding the 'Why' behind security management.

• The business case for information security.
• Legal and regulatory compliance (e.g., GDPR, HIPAA, PCI-DSS).
• Security frameworks and standards (NIST, ISO 27001/27002).
• The role of the CISM in the organization.

Aligning security strategy with business goals.

• Developing an Information Security Strategy.
• Establishing a governance framework and defining roles/responsibilities.
• Creating security policies, standards, and procedures.
• Security metrics and reporting (KPIs, KRIs).

Identifying and managing information risk.

• Risk management concepts (threats, vulnerabilities, impact).
• Establishing a risk management framework.
• Risk identification and classification methodologies.
• Asset identification and valuation.

Analyzing risks and selecting appropriate treatments.

• Qualitative vs. Quantitative risk analysis.
• Risk response strategies (Mitigate, Accept, Transfer, Avoid).
• Business Impact Analysis (BIA).
• Risk monitoring and reporting.

Building the components of a security program.

• Developing a roadmap for the security program.
• Security architecture and controls (technical, administrative, physical).
• Security Awareness, Training, and Education.
• Managing security resources and budgets.

Operating and maintaining the security program.

• Security operations management (e.g., identity and access management).
• Vulnerability management programs.
• Third-party risk management.
• Program monitoring, metrics, and reporting.

Preparing the organization to handle security incidents.

• Creating an Incident Response (IR) plan and policy.
• Establishing an Incident Response Team (IRT/CSIRT).
• Phases of incident response (Preparation, Detection, Analysis).
• Incident detection tools and techniques (IDS/IPS, SIEM).

Responding to and recovering from incidents.

• IR Phases: Containment, Eradication, and Recovery.
• Post-incident activities and lessons learned.
• Introduction to digital forensics.
• Testing the incident response plan.

Ensuring business resilience during disruptions.

• Business Continuity Planning (BCP) vs. Disaster Recovery (DR).
• Key metrics: RTO (Recovery Time Objective) and RPO (Recovery Point Objective).
• DR site strategies (Hot, Warm, Cold).
• Testing BCP/DR plans.

Consolidating knowledge and mastering exam strategy.

• Review of the four CISM domains.
• ISACA's "management" mindset for answering questions.
• Tips and tricks for the CISM exam.
• Full-Length Practice Exam Simulation & Review.