Certified Information Security Manager (CISM)

By the end of this program, participants will be able to:

• Understand the four CISM domains and certification examination requirements.
• Establish and maintain effective information security governance frameworks.
• Identify, assess, and manage enterprise information security risks.
• Develop and manage information security programs aligned with business objectives.
• Plan and implement effective information security incident response and recovery processes.
• Apply examination preparation strategies to improve their readiness for the CISM certification.

The program follows the four domains of the CISM certification examination, with an additional examination preparation and review session.

Day 1: Information Security Governance

• Role of information security in business strategy.
• Establishing and maintaining an information security governance framework.
• Security policies, standards, and procedures.
• Business cases for security investments.
• Legal, regulatory, and contractual requirements.
• Case Study: Aligning information security with enterprise objectives.

Day 2: Information Risk Management

• Risk management fundamentals and frameworks.
• Identifying, analyzing, and evaluating information security risks.
• Risk treatment strategies: avoidance, transfer, mitigation, and acceptance.
• Business impact analysis and risk appetite.
• Third-party and supply chain risk management.
• Workshop: Conducting an information security risk assessment.

Day 3: Information Security Program Development and Management

• Designing and implementing an information security program.
• Managing people, processes, and technology.
• Integrating security into enterprise architecture.
• Security awareness and training programs.
• Program performance measurement and continuous improvement.
• Practical Exercise: Developing an information security program roadmap.

Day 4: Information Security Incident Management

• Establishing and maintaining an incident response plan.
• Incident response roles and responsibilities.
• Incident classification, escalation, and communication.
• Business continuity and disaster recovery planning.
• Post-incident reviews, lessons learned, and process improvement.
• Simulation: Incident response tabletop exercise.

Day 5: Examination Preparation and Review (Optional)

• CISM examination structure and question formats.
• Examination techniques and test-taking strategies.
• Practice questions and guided discussions.
• Key examination focus areas.
• Examination readiness assessment and checklist.

Upon completing the program, participants will be able to:

• Demonstrate comprehensive knowledge of the four CISM domains and their practical business applications.
• Align information security strategies and initiatives with organizational objectives.
• Apply effective governance and enterprise information risk management practices.
• Develop and oversee information security programs.
• Manage information security incidents and support organizational recovery.
• Demonstrate improved readiness for the CISM certification examination.
• Build the confidence and competencies required for leadership roles in information security management.

This program is designed for professionals responsible for information security management, governance, risk, and organizational technology oversight, including:

• Information security managers and professionals.
• IT managers and directors.
• Chief Information Security Officers (CISOs).
• Risk management and GRC professionals.
• IT auditors and compliance officers.
• Cybersecurity consultants and advisers.
• Professionals aspiring to leadership roles in information security management.

The program combines instructor-led presentations, interactive discussions, practical exercises, case studies, and simulated incident response scenarios. Participants also engage in examination-focused reviews and practice questions to strengthen their understanding of the CISM domains.

The program prepares participants for the Certified Information Security Manager (CISM) certification examination administered by ISACA.

Participants seeking the CISM credential must meet ISACA’s applicable examination, experience, and certification requirements.