SC220: ISACA™ CISM Preparation UPDATE

Agenda:

• Domain 1 - Information security governance (18%)

  • Organizational Purpose and Culture

  • Legal, Regulatory, and Contractual Requirements

  • Organizational Structures, Roles, and Responsibilities

  • Information Security Strategy Development

  • Enterprise Architecture

  • Information Governance Frameworks and Standards
    

• Domain 2 — Information security risk management (20%)

  • Emerging Risk and Threat Landscape

  • Vulnerability and Control Deficiency Analysis

  • Risk Treatment/Risk Response Options

  • Risk and Control Ownership

  • Risk Monitoring and Reporting
    

• Domain 3 — Information security Program (33%)

  • Information Security Architecture

  • Information Security Program Resources

  • Information Security Industry Standards and Frameworks

  • Information Security Policies, Standards, Procedures, and Guidelines

  • Information Asset Identification and Classification

  • Information Security Program Metrics Development

  • Information Security Control Implementation and Integrations

  • Information Security Control Testing and Evaluation

  • Information Security Awareness and Training

  • Management of External Services

  • Information Security Program Metrics, Communications, and Reporting
    

• Domain 4 — Incident management (29%)

  • Incident Response Plan

  • Business Impact Analysis (BIA)

  • Business Continuity Plan (BCP)

  • Disaster Recovery Plan (DRP)

  • Incident Classification/Categorization

  • Incident Management Training, Testing, and Evaluation

  • Incident Management Tools and Techniques

  • Incident Investigation and Evaluation

  • Incident Containment Methods

  • Incident Response Communications

  • Incident Eradication and Recovery

  • Post-incident Review Practices

Objectives:

Target audience:

The workshop is aimed at information security experts who have acquired substantial professional experience through comprehensive work in the field of information security. Professionals with five or more years of experience in actively shaping corporate information security will be attracted by the opportunity for this certification.

Job titles include:

• CISO
• CSO
• IT Administrators
• Security Experts
• Risk Managers and Consultants

Prerequisites:

To obtain CISM certification, the following requirements must be met:

• Successful completion of the CISM exam

• Adherence to the ISACA™ Code of Professional Ethics

• Proof of at least five years of professional experience in the field of information security

• Evidence of ongoing professional education (Continuing Professional Education (CPE) Policy)

Description:

Other Info:

This workshop prepares you intensively for the contents and the procedure of the exam for the ISACA™ CISM (Certified Information Security Manager). The fee-based exam consists of 150 questions that must be completed within four hours.

The fee-based exam is not part of the course and is conducted at a separate date. The administration is exclusively via PSI, optionally as an online exam or in an authorized PSI testing center. The purchase of the exam is possible via qSkills™.

ISACA™ certification exam – retake policy

The following regulations for retake exams apply to ISACA™ certification exams:

Candidates have a total of four attempts to pass the respective certification exam within a rolling period of twelve months. If the exam is not passed on the first attempt, a maximum of three further attempts are available within twelve months from the date of the first exam attempt.

The following waiting periods apply for retake exams:

• Retake 1 (2nd exam attempt): at the earliest 30 days after the first exam attempt

• Retake 2 (3rd exam attempt): at the earliest 90 days after the second exam attempt

• Retake 3 (4th exam attempt): at the earliest 90 days after the third exam attempt

For each individual exam attempt, the respectively applicable exam fee must be paid in full.

After passing the exam, the same certification exam may not be taken again within the five-year application period.

Holders of a valid ISACA™ certification may not take the corresponding certification exam again during the validity of their certification.

The current exam and retake policies of ISACA™ apply.

Course language: optionally German or English
Course materials: English
Exam language: English


The official ISACA™ course materials are provided in digital form. Please bring optionally a laptop or a tablet to the training. 

You will naturally receive internet access for your device free of charge in our training center.