ISACA CISM Certified Information Security Manager

• Introduction
• Scope and Exam Info
• $7 Million Cybersecurity Scholarship by EC-Council

• Introduction to Information Security Governance
• Information Security Governance Tasks
• Information Security Strategy
• Alignment to the Organizational Goals
• Security Frameworks
• IS Roles and Responsibilities
• Integrated Governance
• Industry Standards
• Balanced Scorecard
• Structure
• Business Case
• Security Budget
• Security Influencers
• Governance, Risk, and Compliance
• Obtain Management Commitment
• Security Management Roles
• Organizational Structures
• Effective Communication
• Security Metrics
• Chapter 2 Quiz

• Introduction to Risk Management and Compliance
• Information Classification
• Responsibility Assignment
• Evaluate Risk Impact
• Asset Validation Methods
• Legal and Regulatory Requirements
• Identifying Emerging Threats
• When It’s Time to Reassess
• Threat Knowledge
• Risk Assessments and Analysis Methodology
• Risk Assessment Methodology
• Risk Prioritization
• Risk Factors
• Risk Reporting
• Risk Monitoring
• Risk Treatment Strategies
• Risk Baselines
• Monitoring Security Controls
• Gap Analysis
• Risk Integration
• Compliance Reporting
• Cost Determines Treatment
• Chapter 3 Quiz

• Introduction to Information Security Program Development Management
• Alignment with the Business
• Acquire and Deploy Security Resources
• Keep It Running
• Controls and Counter Measures
• Security Architecture
• Standards and Procedures Development
• Security Controls
• Security Implementation
• Awareness and Training
• Process Integration
• Contracts and Third Party Security
• Security Metrics
• Effectiveness and Applicability Testing
• Chapter 4 Quiz

• Introduction to Security Incident Management
• Incident Response Plan
• Incident Management Concepts and Practices
• Integration with DR and BCP
• Recovery Terms
• Incident Classification Methods
• Damage Containment
• Re-plan
• Roles and Responsibilities
• Incident Response Tools and Equipment
• Reliability of Evidence
• Validation of Evidence
• Incident Response Reporting and Procedures
• Root Cause Analysis
• Business Impact Analysis
• Detecting and Analyzing Security Events
• Incident Management System
• Chapter 5 Quiz

Passing the Exam