SC220: ISACA™ CISM Preparation

Agenda:

• Domain 1 - Information security governance (17%)
  • Enterprise governance overview
  • Organizational culture, structures, roles and responsibilities
  • Legal, regulatory and contractual requirements
  • Information security strategy
  • Information governance frameworks and standards
  • Strategic planning
    
    
• Domain 2 — Information security risk management (20%)
  • Risk and threat landscape
  • Vulnerability and control deficiency analysis
  • Risk assessment, evaluation and analysis
  • Information risk response
  • Risk Monitoring, reporting and communication
    
    
• Domain 3 — Information security program development and management (33%)
  • IS Program development and resources
  • IS standards and frameworks
  • Defining an IS program road map
  • IS program metrics
  • IS program management
  • IS awareness and training
  • Integrating the security program with IT operations
  • Program Communication, reporting and performance management
    
    
• Domain 4 — Information security incident management (30%)
  • Incident Management and incident response overview
  • Incident management and response plans
  • Incident classification/categorization
  • Incident management operations, tools and technologies
  • Incident investigation, evaluation, containment and communication
  • Incident eradication, recovery and review
  • Business impact and continuity
  • Disaster recovery planning
  • Training, testing and evaluation

Objectives:

Target audience:

The workshop is aimed at information security experts who have acquired substantial professional experience through comprehensive work in the field of information security. Professionals with five or more years of experience in actively shaping corporate information security will be attracted by the opportunity for this certification.

Job titles include:

• CISO
• CSO
• IT Administrators
• Security Experts
• Risk Managers and Consultants

Prerequisites:

To obtain CISM certification, the following requirements must be met:

• Successful completion of the CISM exam
• Adherence to the ISACA™ Code of Professional Ethics
• Proof of at least five years of professional experience in the field of information security
• Evidence of ongoing professional education (Continuing Professional Education (CPE) Policy)

Description:

Other Info:

The official ISACA™ course materials are provided in digital format. Please bring either a laptop or a tablet to the training.

Internet access for your device is provided free of charge at our training center.