CISM Online Training

This intermediate ISACA CISM training prepares learners to take the CISM exam which is the one required exam to earn the CISM certification. In any industry, there are professional organizations who design certifications to help define what skills and knowledge are necessary to be considered an expert within the profession. For the world of information security, ISACA is one such organization. The nonprofit org publishes several certifications to define what an expert in developing, managing or maintaining information security programs looks like. The Certified Information Security Manager is central to a serious security engineer's career -- earn one and you can prove your expertise in enterprise information security governance, management and incident response. For anyone who manages their ISACA training, this ISACA training can be used for CISM exam prep, onboarding new security engineers, individual or team training plans, or as an ISACA reference resource.

What You Need to Know

Skill:
Establishing an Information Security Strategy
- 1. Information Security Governance
  11 mins
- 2. Information Security Strategy
  11 mins
- 3. Security Frameworks
  7 mins
- 4. Identifying and Managing Strategic Objectives
  7 mins
- 5. Business Model for Information Security (BMIS)
  6 mins
- 6. Section Review
  6 mins
Skill:
Security Program Resources
- 1. Policies, Processes, and Procedures
  8 mins
- 2. Standards, Guidelines, and Architecture
  5 mins
- 3. Controls, Metrics, and Assets
  8 mins
- 4. Risk Ledgers, Vulnerability Assessments, and Insurance oh my!
  5 mins
- 5. Critical Data, BIA’s, and BC/DR Planning
  9 mins
- 6. Incident Logs, Audits, & Culture
  4 mins
- 7. Security Training, Third Party Risk, & LCR Requirements
  6 mins
Skill:
Keys to a Successful Security Program Implementation
- 1. Creating a Business Case
  11 mins
- 2. Communications & Reporting
  7 mins
- 3. Communicating Technical Information
  6 mins
- 4. Management Commitment
  7 mins
- 5. Security Awareness Training
  7 mins
- 6. Common Causes of Failure
  10 mins
Skill:
Security Roles and Metrics
- 1. Organizational Roles
  13 mins
- 2. Data Roles
  4 mins
- 3. Metrics
  7 mins
- 4. Metrics Example 1
  13 mins
- 5. Metrics Example 2
  10 mins
- 6. Security Balanced Scorecard
  6 mins
Skill:
Implementing Risk Management
- 1. The Role of Risk Management
  7 mins
- 2. Risk Management Frameworks
  11 mins
- 3. Risk Management Strategy
  10 mins
- 4. Analyzing Risk
  11 mins
- 5. Risk Analysis Techniques
  8 mins
- 6. Treating Risk
  12 mins
Skill:
Risk Management Standards
- 1. Risk Management Activities
  10 mins
- 2. NIST SP 800-39
  11 mins
- 3. NIST SP 800-30
  9 mins
- 4. ISO/IEC 27005
  12 mins
- 5. Factor Analysis of Information Risk (FAIR)
  5 mins
Skill:
Asset Inventory and Threats
- 1. Hardware, Software, and Information Assets
  8 mins
- 2. Cloud and Virtual Assets
  14 mins
- 3. Asset, Information, and System Classification
  10 mins
- 4. Asset Valuation
  3 mins
- 5. Identifying Threats to Assets
  8 mins
- 6. Identifying Asset Vulnerabilities
  4 mins
Skill:
Operational Risk Management
- 1. Risk Management Objectives
  14 mins
- 2. Third-Party Risk Management
  18 mins
- 3. The Risk Register
  5 mins
- 4. Integrating Risk Management into Other Processes
  8 mins
- 5. Risk Monitoring and Reporting
  6 mins
Skill:
Information Security Program Development
- 1. Designing an Information Security Program
  5 mins
- 2. Information Security Program Details
  6 mins
- 3. Information Security Architecture
  6 mins
- 4. Information Security Program Management
  10 mins
- 5. Security Policies
  9 mins
- 6. Working With Internal and External Resources
  7 mins
Skill:
IS Audit Planning
- 1. Discussing IS Audit Standards, Guidelines, and Code of Ethics
  9 mins
- 2. Evaluating the Business Process
  9 mins
- 3. Auditing Business Applications
  12 mins
- 4. Defining Types of Controls
  8 mins
- 5. Analyzing Risk Based Audit Planning
  9 mins
- 6. Identifying Types of Audits
  5 mins
Skill:
IS Audit Execution
- 1. Discussing Audit Project Management
  10 mins
- 2. Sampling Methodologies
  7 mins
- 3. Considering Audit Evidence Collection Techniques
  9 mins
- 4. Exploring Data Analytics
  11 mins
- 5. Implementing Continuous Online Auditing
  6 mins
- 6. Exploring Reporting and Communication Techniques
  7 mins
- 7. Ensuring Quality and Improvement of the Audit Process
  4 mins
- 8. IS Audit Process Domain Review
  9 mins
Skill:
Data Classification and Encryption
- 1. Exploring Data Classification
  4 mins
- 2. Covering Encryption Basics
  3 mins
- 3. Reviewing Encryption Systems
  6 mins
- 4. Diving into Digital Signatures
  8 mins
- 5. Touring Cryptographic Applications
  3 mins
- 6. Examining Public Key Infrastructure (PKI)
  4 mins
Skill:
Security Program Operations
- 1. SOCs and Event Monitoring
  11 mins
- 2. Vulnerability and Patch Management
  8 mins
- 3. Network Protection
  13 mins
- 4. Content Filtering
  12 mins
- 5. Endpoint Protection and Management
  6 mins
Skill:
Security Program Management Functions
- 1. Secure Engineering and Development
  7 mins
- 2. Identity and Access Management
  13 mins
- 3. Security Training and MSSPs
  13 mins
- 4. Data Backup and Recovery
  16 mins
- 5. Financial and Capacity Management
  5 mins
Skill:
Security Controls and Control Frameworks
- 1. Security Controls
  6 mins
- 2. Security Control Categories
  5 mins
- 3. Security Control Functions
  6 mins
- 4. Testing Security Controls
  7 mins
- 5. Control Objectives and Frameworks
  7 mins
- 6. Designing Controls
  6 mins
- 7. Security Control Review
  15 mins
Skill:
Phases of Incident Response
- 1. Incident Response Preparation
  12 mins
- 2. Incident Response Planning
  9 mins
- 3. Detection, Initiation, and Evaluation
  8 mins
- 4. Containment, Eradication, and Recovery
  6 mins
- 5. Remediation, Closure, and Post-Incident Review
  4 mins
- 6. Incident Response Resources
  7 mins
Skill:
Business Continuity and Disaster Recovery Planning
- 1. BC and DR Planning
  4 mins
- 2. BC/DR Planning Process
  12 mins
- 3. Creating a BC Plan
  7 mins
- 4. DR Planning
  15 mins
- 5. Resiliency Technologies
  8 mins
- 6. Testing BC/DR Plans
  5 mins

No Transcript Available

Information Security Governance

Course overview

14 HOURS OF TRAINING

17 SKILLS

102 VIDEOS

0 VIRTUAL LABS

1 PRACTICE EXAM

Access all premium content with a free week!

Start a free week

Bob Salmans

Nugget trainer since 2020

Read the full bio

What is it like to train with us?

Our learners say it best.

Helps me learn the skills I need when I need them

THOMAS S. | SYSTEMS ENGINEER & CONSULTANT

Read Reviews

ISACA CISM – Certified Information Security Manager FAQs: Cost, Training, Value

What will you learn in this Certified Information Security Manager training?

You'll learn everything you need to prove that you're ready to assume the responsibilities of managing an enterprise network's cybersecurity program. This thorough course prepares you for the CISM exam from ISACA and covers managerial expertise in security governance, program development, risk management and handling incidents that do occur.

Who should take this Certified Information Security Manager course?

Anyone who wants to advance their career from an IT tech or security technician position into a managerial role or senior engineer in the cybersecurity field should consider this Certified Information Security Manager course. Take this course, earn the CISM from ISACA and prepare yourself for enterprise security management roles.

Is this Certified Information Security Manager training associated with any certifications?

Yes, this course was specifically tailored to the learning objectives of ISACA's Certified Information Security Manager certification. ISACA is one of the IT industry's most respected certifying bodies for cybersecurity professionals and the CISM is a certification earned by some of the best-trained, most capable security managers.

What certification should you consider after taking this Certified Information Security Manager course?

You don't have to attempt the Certified Information Security Manager exam after taking this course, but if you don't, you'd be missing a valuable opportunity. What you'll learn from this course is valuable for anyone in a managerial position in an enterprise network, but it's especially good for cert prep.

Why should you take this Certified Information Security Manager training?

You should take this Certified Information Security Manager training if you have any interest in earning ISACA's premier certification in information security governance, program development and incident response. You'll learn what the best enterprise cybersecurity program managers know how to do, which can advance your career into exciting positions.