New members: get your first 7 days of ITTutorPro Premium for free! Join for free

CISM Certification Training

Course Description

CISM Certification Training

CISM (Certified Information Security Manager) is a key certification for information security professionals who manage, design, oversee, and assess enterprise information security. This CISM certification course, closely aligned with ISACA’s best practices, helps you learn about IT security systems.

CISM Course Overview

You will acquire the requisite skills to design, deploy, and manage security architecture for your organization with this CISM certification training from Simplilearn. This course is aligned with ISACA best practices. Today, enterprises and government agencies increasingly expect their IT professionals to hold a CISM certification.

Eligibility

CISM certification is a globally recognized professional requirement in the IT Security domain. This certification is best suited for security consultants and managers, IT directors and managers, security auditors and architects, security system engineers, CISOs, information security managers, IT consultants, and risk officers.

Pre-requisites

To become a CISM certified professional or to opt for this CISM course, you need to fulfill some criteria, including – A completed application submitted within five years from the date of initially passing the examination (you must ensure that all experience is independently verified by employers).

The experience must have been gained within the 10-year period preceding the application date for certification or within five years of passing the examination. Three of the five years of work experience must be gained in the role of an information security manager (it must be broad and gained in three of the four CISM domains)

Share on:

Course Syllabus

Domain 01: Information Security Governance

Lesson 1: Information Security Governance Overview
Information Security Governance Overview Part 1
Information Security Governance Overview Part 2
Information Security Governance Overview Part 3
Information Security Governance Overview Part 4
Information Security Governance Overview Part 5
Importance of Information Security Governance Part 1
Importance of Information Security Governance Part 2
Outcomes of Information Security Governance Part 1
Outcomes of Information Security Governance Part 2
Outcomes of Information Security Governance Part 3
Outcomes of Information Security Governance Part 4
Outcomes of Information Security Governance Part 5
Outcomes of Information Security Governance Part 6
Lesson 2: Effective Information Security Governance
Business Goals and Objectives Part 1
Business Goals and Objectives Part 2
Roles and Responsibilities of Senior Management Part 1
Roles and Responsibilities of Senior Management Part 2
Domain Tasks Part 1
Domain Tasks Part 2
Business Model for Information Security Part 1
Business Model for Information Security Part 2
Business Model for Information Security Part 3
Business Model for Information Security Part 4
Dynamic Interconnections Part 1
Dynamic Interconnections Part 2
Dynamic Interconnections Part 3
Dynamic Interconnections Part 4
Lesson 3: Information Security Concepts and Technologies
Information Security Concepts and Technologies Part 1
Information Security Concepts and Technologies Part 2
Information Security Concepts and Technologies Part 3
Technologies Part 1
Technologies Part 2
Lesson 4: Information Security Manager
Responsibilities
Senior Management Commitment Part 1
Senior Management Commitment Part 2
Obtaining Senior Management Commitment Part 1
Obtaining Senior Management Commitment Part 2
Establishing Reporting and Communication Channels Part 1
Establishing Reporting and Communication Channels Part 2
Lesson 5: Scope and Charter of Information Security Governance
Assurance Process Integration and Convergence
Convergence
Governance and Third-Party Relationships
Lesson 6: Information Security Governance Metrics
Metrics
Effective Security Metrics Part 1
Effective Security Metrics Part 2
Effective Security Metrics Part 3
Effective Security Metrics Part 4
Security Implementation Metrics
Strategic Alignment Part 1
Strategic Alignment Part 2
Risk Management
Value Delivery
Resource Management Part 1
Resource Management Part 2
Performance Measurement
Assurance Process Integration/Convergence
Lesson 7: Information Security Strategy Overview
Another View of Strategy
Lesson 8: Creating Information Security Strategy
Information Security Strategy
Common Pitfalls Part 1
Common Pitfalls Part 2
Objectives of the Information Security Strategy
What is the Goal?
Defining Objectives
Business Linkages
Business Case Development Part 1
Business Case Development Part 2
Business Case Development Part 3
Business Case Objectives
The Desired State
COBIT
COBIT Controls
COBIT Framework
Capability Maturity Model
Balanced Scorecard
Architectural Approaches
ISO/IEC 27001 and 27002
Risk Objectives Part 1
Risk Objectives Part 2
Lesson 9: Determining Current State Of Security
Current Risk Part 1
Current Risk Part 2
BIA
Lesson 10: Information Security Strategy Development
The Roadmap
Elements of a Strategy
Strategy Resources and Constraints
Lesson 11: Strategy Resources
Policies and Standards
Definitions
Enterprise Information Security Architectures
Controls
Countermeasures
Technologies
Personnel
Organizational Structure
Employee Roles and Responsibilities
Skills
Audits
Compliance Enforcement
Threat Assessment
Vulnerability Assessment
Risk Assessment
Insurance
Business Impact Assessment
Outsourced Security Providers
Lesson 12: Strategy Constraints
Legal and Regulatory Requirements
Physical Constraints
The Security Strategy
Lesson 13: Action Plan to Implement Strategy
Gap Analysis Part 1
Gap Analysis Part 2
Gap Analysis Part 3
Policy Development Part 1
Policy Development Part 2
Standards Development
Training and Awareness
Action Plan Metrics
General Metric Considerations Part 1
General Metric Considerations Part 2
General Metric Considerations Part 3
General Metric Considerations Part 4
CMM4 Statements
Objectives for CMM4
Section Review

Knowledge Check

Knowledge Check 1

Domain 02: Information Risk Management and Compliance

Lesson 1: Risk Management Overview
Risk Management Overview
Types of Risk Analysis
The Importance of Risk Management
Risk Management Outcomes
Risk Management Strategy
Lesson 2: Good Information Security Risk Management
Context and Purpose
Scope and Charter
Assets
Other Risk Management Goals
Roles and Responsibilities
Lesson 3: Information Security Risk Management Concepts
Technologies
Lesson 4: Implementing Risk Management
The Risk Management Framework
The External Environment
The Internal Environment
The Risk Management Context
Gap Analysis
Other Organizational Support
Lesson 5: Risk Assessment
NIST Risk Assessment Methodology
Aggregated or Cascading Risk
Other Risk Assessment Approaches
Identification of Risks
Threats
Vulnerabilities Part 1
Vulnerabilities Part 2
Risks
Analysis of Relevant Risks
Risk Analysis
Semi -Quantitative Analysis
Quantitative Analysis Example
Evaluation of Risks
Risk Treatment Options
Impact
Lesson 6: Controls Countermeasures
Controls
Residual Risk
Information Resource Valuation
Methods of Valuing Assets
Information Asset Classification
Determining Classification
Impact Part 1
Impact Part 2
Lesson 7: Recovery Time Objectives
Recovery Point Objectives
Service Delivery Objectives
Third-Party Service Providers
Working with Lifecycle Processes
IT System Development
Project Management Part 1
Project Management Part 2
Lesson 8: Risk Monitoring and Communication
Risk Monitoring and Communication
Other Communications
Section Review

Knowledge Check

Knowledge Check 2

Domain 03: Information Security Program Development and Management

Introduction
Lesson 1: Development of Information Security Program
Importance of the Program
Outcomes of Security Program Development
Effective Information Security Program Development
Lesson 2: Information Security Program Objectives
Cross Organizational Responsibilities
Program Objectives Part 1
Program Objectives Part 2
Defining Objectives Part 1
Defining Objectives Part 2
Lesson 3: Information Security Program Development Concepts Part 1
Information Security Program Development Concepts Part 2
Technology Resources
Information Security Manager
Lesson 4: Scope and Charter of Information Security Program Development
Assurance Function Integration
Challenges in Developing Information Security Program
Pitfalls
Objectives of the Security Program
Program Goals
The Steps of the Security Program
Defining the Roadmap Part 1
Defining the Roadmap Part 2
Elements of the Roadmap Part 1
Elements of the Roadmap Part 2
Elements of the Roadmap Part 3
Elements of the Roadmap Part 4
Elements of the Roadmap Part 5
Gap Analysis
Lesson 5: Information Security Management Framework
Security Management Framework
COBIT 5
ISO/IEC 27001
Lesson 6: Information Security Framework Components
Operational Components Part 1
Operational Components Part 2
Management Components
Administrative Components
Educational and Informational Components
Lesson 7: Information Security Program Resources
Resources
Documentation
Enterprise Architecture Part 1
Enterprise Architecture Part 2
Enterprise Architecture Part 3
Controls as Strategy Implementation Resources Part 1
Controls as Strategy Implementation Resources Part 2
Controls as Strategy Implementation Resources Part 3
Controls as Strategy Implementation Resources Part 4
Common Control Practices
Countermeasures
Technologies Part 1
Technologies Part 2
Technologies Part 3
Technologies Part 4
Personnel Part 1
Personnel Part 2
Security Awareness
Awareness Topics
Formal Audits
Compliance Enforcement
Project Risk Analysis
Other Actions
Other Organizational Support
Program Budgeting Part 1
Program Budgeting Part 2
Lesson 8: Implementing an Information Security Program
Policy Compliance
Standards Compliance
Training and Education
ISACA Control Objectives
Third-party Service Providers Part 1
Third-party Service Providers Part 2
Integration into Lifecycle Processes
Monitoring and Communication
Documentation
The Plan of Action Part 1
The Plan of Action Part 2
Lesson 9: Information Infrastructure and Architecture
Managing Complexity Part 1
Managing Complexity Part 2
Objectives of Information Security Architectures Part 1
Objectives of Information Security Architectures Part 2
Physical and Environmental Controls
Lesson 10: Information Security Program
Information Security Program Deployment Metrics
Metrics
Strategic Alignment
Risk Management
Value Delivery
Resource Management
Assurance Process Integration
Performance Measurement
Security Baselines
Lesson 11: Security Program Services and Operational Activities
IS Liaison Responsibilities Part 1
IS Liaison Responsibilities Part 2
Cross-Organizational Responsibilities
Security Reviews and Audits Part 1
Security Reviews and Audits Part 2
Management of Security Technology
Due Diligence Part 1
Due Diligence Part 2
Compliance Monitoring and Enforcement Part 1
Compliance Monitoring and Enforcement Part 2
Assessment of Risk and Impact Part 1
Assessment of Risk and Impact Part 2
Outsourcing and Service Providers
Cloud Computing Part 1
Cloud Computing Part 2
Cloud Computing Part 3
Integration with IT Processes
Section Review

Knowledge Check

Knowledge Check 3

Domain 04: Information Security Incident Management

Lesson 1: Incident Management Overview Part 1
Incident Management Overview Part 2
Incident Management Overview Part 3
Types of Events Part 1
Types of Events Part 2
Goals of Incident Management Part 1
Goals of Incident Management Part 2
Goals of Incident Management Part 3
Lesson 2: Incident Response Procedures Part 1
Incident Response Procedures Part 2
Importance of Incident Management
Outcomes of Incident Management
Incident Management
Concepts Part 1
Concepts Part 2
Concepts Part 3
Incident Management Systems Part 1
Incident Management Systems Part 2
Lesson 3: Incident Management Organization
Responsibilities Part 1
Responsibilities Part 2
Responsibilities Part 3
Senior Management Commitment
Lesson 4: Incident Management Resources
Policies and Standards
Incident Response Technology Concepts
Personnel
Roles and Responsibilities (eNotes)
Skills
Awareness and Education
Audits
Lesson 5: Incident Management Objectives
Defining Objectives
The Desired State
Strategic Alignment
Other Concerns
Lesson 6: Incident Management Metrics and Indicators
Implementation of the Security Program Management
Management Metrics and Monitoring Part 1
Management Metrics and Monitoring Part 2
Other Security Monitoring Efforts
Lesson 7: Current State of Incident Response Capability
Threats
Vulnerabilities
Lesson 8: Developing an Incident Response Plan
Elements of an Incident Response Plan
Gap Analysis
BIA Part 1
BIA Part 2
Escalation Process for Effective IM
Help Desk Processes for Identifying Security Incidents
Incident Management and Response Teams
Organizing, Training, and Equipping the Response Staff
Incident Notification Process
Challenges in making an Incident Management Plan
Lesson 9: BCP/DRP
Goals of Recovery Operations Part 1
Goals of Recovery Operations Part 2
Choosing a Site Selection Part 1
Choosing a Site Selection Part 2
Implementing the Strategy
Incident Management Response Teams
Network Service High-availability
Storage High-availability
Risk Transference
Other Response Recovery Plan Options
Lesson 10: Testing Response and Recovery Plans
Periodic Testing
Analyzing Test Results Part 1
Analyzing Test Results Part 2
Measuring the Test Results
Lesson 11: Executing the Plan
Updating the Plan
Intrusion Detection Policies
Who to Notify about an Incident
Recovery Operations
Other Recovery Operations
Forensic Investigation
Hacker / Penetration Methodology
Section Review
Sequence 05

Knowledge Check

Knowledge Check 4

$695.00

  • Vast selection of courses and labs Access
  • Unlimited access from all devices
  • Learn from industry expert instructors
  • Assessment quizzes and monitor progress
  • Vast selection of courses and labs Access
  • Blended Learning with Virtual Classes
  • Access to new courses every quarter
  • 100% satisfaction guarantee

You Will Get Certification After Completetion This Course.

Instructor Led Lectures
All IT Tutor Pro Formerly It Nuggets Courses replicate a live class experience with an instructor on screen delivering the course’s theories and concepts.These lectures are pre-recorded and available to the user 24/7. They can be repeated, rewound, fast forwarded.
Visual Demonstrations, Educational Games & Flashcards
IT Tutor Pro Formerly It Nuggets recognizes that all students do not learn alike and different delivery mediums are needed in order to achieve success for a large student base. With that in mind, we delivery our content in a variety of different ways to ensure that students stay engaged and productive throughout their courses.
Mobile Optimization & Progress Tracking
Our courses are optimized for all mobile devices allowing students to learn on the go whenever they have free time. Students can access their courses from anywhere and their progress is completely tracked and recorded.
Practice Quizzes And Exams
IT Tutor Pro Formerly It Nuggets Online’s custom practice exams prepare you for your exams differently and more effectively than the traditional exam preps on the market. Students will have practice quizzes after each module to ensure you are confident on the topic you are learning.
World Class Learning Management System
IT Tutor Pro Formerly It Nuggets provides the next generation learning management system (LMS). An experience that combines the feature set of traditional Learning Management Systems with advanced functionality designed to make learning management easy and online learning engaging from the user’s perspective.

Frequently Asked Questions

How does online education work on a day-to-day basis?
Instructional methods, course requirements, and learning technologies can vary significantly from one online program to the next, but the vast bulk of them use a learning management system (LMS) to deliver lectures and materials, monitor student progress, assess comprehension, and accept student work. LMS providers design these platforms to accommodate a multitude of instructor needs and preferences.
Is online education as effective as face-to-face instruction?
Online education may seem relatively new, but years of research suggests it can be just as effective as traditional coursework, and often more so. According to a U.S. Department of Education analysis of more than 1,000 learning studies, online students tend to outperform classroom-based students across most disciplines and demographics. Another major review published the same year found that online students had the advantage 70 percent of the time, a gap authors projected would only widen as programs and technologies evolve.
Do employers accept online degrees?
All new learning innovations are met with some degree of scrutiny, but skepticism subsides as methods become more mainstream. Such is the case for online learning. Studies indicate employers who are familiar with online degrees tend to view them more favorably, and more employers are acquainted with them than ever before. The majority of colleges now offer online degrees, including most public, not-for-profit, and Ivy League universities. Online learning is also increasingly prevalent in the workplace as more companies invest in web-based employee training and development programs.
Is online education more conducive to cheating?
The concern that online students cheat more than traditional students is perhaps misplaced. When researchers at Marshall University conducted a study to measure the prevalence of cheating in online and classroom-based courses, they concluded, “Somewhat surprisingly, the results showed higher rates of academic dishonesty in live courses.” The authors suggest the social familiarity of students in a classroom setting may lessen their sense of moral obligation.
How do I know if online education is right for me?
Choosing the right course takes time and careful research no matter how one intends to study. Learning styles, goals, and programs always vary, but students considering online courses must consider technical skills, ability to self-motivate, and other factors specific to the medium. Online course demos and trials can also be helpful.
What technical skills do online students need?
Our platform typically designed to be as user-friendly as possible: intuitive controls, clear instructions, and tutorials guide students through new tasks. However, students still need basic computer skills to access and navigate these programs. These skills include: using a keyboard and a mouse; running computer programs; using the Internet; sending and receiving email; using word processing programs; and using forums and other collaborative tools. Most online programs publish such requirements on their websites. If not, an admissions adviser can help.
preloader