CISM Certification Training Course

The CISM is a management-oriented certification that supports global security standards and attests to people’s abilities to manage designs, supervise, and evaluate an enterprise’s information security. Candidates can gain an understanding of risk management, information security governance, and the creation of security policies and strategies by taking the CISM training course at Talent Arabia.

Curriculum

Governance of information security (17%)

• Information Security Governance’s Importance
• Legal, Regulatory, and Contractual Requirements Organizational Culture
• Organizational structures, responsibilities, and roles
• Information Security Strategy in
• Development of an Information Security Strategy
• Frameworks and Standards for Information Governance
• Planning Strategically

 Risk Management for Information Security (20%)

• Analysis of Vulnerabilities and Control Deficiencies in the Emerging Risk and Threat Landscape and Information Risk Assessment
• Analysis, Evaluation, and Evaluation of Risk
• Information Risk Response,
• Options for risk management/risk response
• Control and Risk Ownership
• Monitoring and reporting of risks CISM Learning Objectives

Information Security Program (33%)

• Determine the information security program’s compatibility with company strategies by conducting an evaluation.
• Gain a thorough understanding of the governance structure for information security.
• Part A: Development of the Information Security Program
• Overview of the Information Security Program
• Resources for Information Security Programs
• Identification and Classification of Information Assets
• Frameworks and Industry Standards for Information Security
• Security Policies, Procedures, and Guidelines for Information
• Creating a Program for Information Security Route Map
• Metrics for Information Security Programs
• Management of Information Security Programs
• Design and selection of information security controls
• Implementing and integrating information security controls
• Testing and evaluation of information security control measures
• Integration of the Security Program with IT Operations Information Security Awareness and Training
• Relationships and External Service Management
• Communications and Reporting for the Information Security Program
• Create and manage an information security governance structure and related processes.
• Establish and maintain an information security programme (ISP) that recognizes, upholds, and protects the organization’s assets.
• To achieve the aims and objectives of the organization, control information risk to an acceptable level depending on risk appetite.
• Become thoroughly knowledgeable about the four certification domains for information security managers.
• Develop the skills necessary to track, investigate, respond to, and recover from information security risks by designing, establishing,            and administering procedures that will have the least negative impact on the business.

Incident Management 30%

• Part A: Preparedness for Incident Management
• Overview of Incident Management and Incident Response
• Plans for incident management and response
• Commercial Impact Analysis
• Plan for Business Continuity
• Plan for Disaster Recovery
• Classification/Categorization of Incidents
• Management of Incidents testing, evaluation, and training
• Operations Management for Incidents
• Technologies and Tools for Incident Management
• Investigation and assessment of incidents
• Methods for incident containment
• Response to Incident Communications
• Putting an end to incidents and healing
• Practices for Post-Incident Reviews