image

By the end of this course, participants will be able to:

  • Develop, implement, and manage an enterprise information security program.
  • Establish governance frameworks for information security policies and procedures.
  • Conduct risk assessments and implement risk mitigation strategies.
  • Ensure compliance with industry regulations and legal requirements.
  • Oversee security incident management and response strategies.
  • Align information security with business objectives and IT governance.
Virtual Instructor-Led Training 4 days / 32 hours

Upcoming Schedules

Date Time Enroll
Nov 17 - Nov 20, 2026 9:00 AM - 5:00 PM America/New_York Add To Cart
Jan 25 - Jan 28, 2027 9:00 AM - 5:00 PM America/New_York Add To Cart
Mar 29 - Apr 01, 2027 9:00 AM - 5:00 PM America/New_York Add To Cart
May 24 - May 27, 2027 9:00 AM - 5:00 PM America/New_York Add To Cart
Jul 26 - Jul 29, 2027 9:00 AM - 5:00 PM America/New_York Add To Cart
Sep 27 - Sep 30, 2027 9:00 AM - 5:00 PM America/New_York Add To Cart
Nov 29 - Dec 02, 2027 9:00 AM - 5:00 PM America/New_York Add To Cart

Who should attend Certified Information Security Manager (CISM) Course

The intended audience for this course is information security and IT professionals, such as network administrators and engineers, IT managers, and IT auditors, and other individuals who want to learn more about information security, who are interested in learning in-depth information about information security management, who are looking for career advancement in IT security, or who are interested in earning the CISM certification.


Prerequisites for Certified Information Security Manager (CISM) Course

CISM is intended for information security professionals with at least five years of relevant work experience and at least three years in the role of information security manager.

Certified Information Security Manager (CISM) Course Outline

  • Organizational Purpose and Culture
  • Legal, Regulatory, and Contractual Requirements
  • Organizational Structures, Roles, and Responsibilities
  • Information Security Strategy Development
  • Enterprise Architecture
  • Information Governance Frameworks and Standards
  • Strategic Planning
  • Emerging Risk and Threat Landscape
  • Vulnerability and Control Deficiency Analysis
  • Risk Assessment and Analysis
  • Risk Treatment/Risk Response Options
  • Risk and Control Ownership
  • Risk Monitoring and Reporting
  • Information Security Architecture
  • Information Security Program Resources
  • Information Security Industry Standards and Frameworks
  • Information Security Policies, Standards, Procedures, and Guidelines
  • Information Asset Identification and Classification
  • Information Security Control Design and Selection
  • Information Security Program Metrics Development
  • Information Security Control Implementation and Integrations
  • Information Security Control Testing and Evaluation
  • Information Security Awareness and Training
  • Management of External Services
  • Information Security Program Metrics, Communications, and Reporting
  • Incident Response Plan
  • Business Impact Analysis (BIA)
  • Business Continuity Plan (BCP)
  • Disaster Recovery Plan (DRP)
  • Incident Classification/Categorization
  • Incident Management Training, Testing, and Evaluation
  • Incident Management Tools and Techniques
  • Incident Investigation and Evaluation
  • Incident Containment Methods
  • Incident Response Communications
  • Incident Eradication and Recovery
  • Post-incident Review Practice

Resources

FAQs on Certified Information Security Manager (CISM)

This course is designed for information security and IT professionals, including network administrators, engineers, IT managers, and IT auditors, who want to deepen their knowledge of information security management, advance their careers, or earn the CISM certification.

Candidates should have at least five years of relevant information security work experience, including a minimum of three years serving in an information security manager role.

Participants will learn to develop and manage enterprise information security programs, establish governance frameworks, conduct risk assessments, ensure regulatory compliance, oversee incident response, and align security initiatives with business goals.

The course covers four main domains: Information Security Governance, Information Security Risk Management, Information Security Program Development and Management, and Incident Management, including topics like risk assessment, compliance, and incident response planning.

No, this course is designed for experienced professionals with substantial background in information security management, not those new to the field.