Certified Information Security Manager (CISM®) - preparation course

Module 1 - Information Security Governance

• Deals with organizing the design and governance of the information security function within the organization. This includes: setting information security goals (in measurable terms), determining roles and responsibilities, describing the current and desired situation, performing a gap analysis that leads to a strategy to achieve the desired situation, as well as translating this into an information security action plan; get to work!

Module 2 - Information Security Risk Management

• Provides insight into formulating a risk management strategy, associated roles and responsibilities, determining the risk management framework, performing risk gap analysis, assessment and treatment options of risks, integration with life cycle processes, working with baseline measures, as well as risk monitoring and communication.

Module 3 - Information Security Program

• Concerns the translation of the action plan created in Module 1 into an information security program: defining program objectives, scope of the program, performing gap analysis of the current and desired situation with regard to the development and management of an IS program, focusing on IS architectures, management tasks, operational aspects of program implementation, the importance of third parties, types of measures that can be implemented, as well as program metrics and monitoring to monitor the progress of program implementation.

Module 4 - Incident Management.

• And what if things unexpectedly go wrong, if an incident grows into a disaster? Incident response goals and procedures need to be developed, an incident response team that is knowledgeable and trained on the subject, also incident response plans, disaster recovery plans and procedures. Those plans should be extensively tested. Consideration has been given to fallback sites (hot, warm, cold, etc.) and desired recovery times have been determined so that the business can be operational again on time. And after a disaster, various post-incident activities take place, such as securing evidence and locating the root cause of the disaster.

Practice Exam

• On your last course day, you will take an extensive CISM practice exam, so that you can judge for yourself to what extent you are ready for the official ISACA CISM certification exam and to which domains you should pay more attention. After taking the practice exam, you will have the opportunity to discuss answers or potential issues with your trainer and the group.