CISM (Certified Information Security Manager) training IMF Academy

Overview

In this 4-day CISM training, the 4 CISM (exam) domains (with the different weighting factors) are covered as well as the subtopics and tasks you will be tested on:

DOMAIN IInformation Security Governance (17%)

• Enterprise governance overview
• Organizational culture, structures, roles, and responsibilities
• Legal, regulatory, and contractual requirements
• Information security strategy
• Information governance frameworks and standards
• strategic scheduling

DOMAIN IIInformation Security Risk Management (20%)

• Risk and threat landscape
• Vulnerability and control deficiency analysis
• Risk assessment, evaluation, and analysis
• Information risk response
• Risk monitoring, reporting, and communication

DOMAIN IIIInformation Security Program (33%)

• Information security program development and resources
• Information security standards and frameworks
• Defining an information security program road map
• Information security program metrics
• Information security program management
• Information security awareness and training
• Integrating the security program with IT operations
• Program communications, reporting, and performance management

DOMAIN IVIncident Management (30%)

• Incident management and incident response overview
• Incident management and response plans
• Incident classification/categorization
• Incident management operations, tools, and technologies
• Incident investigation, evaluation, containment, and communication
• Incident eradication, recovery, and review
• Business impact and continuity