CISM -Certified Information Security Manager

Course overview

Certified Information Security Manager® (CISM®) affirms your ability to assess risks, implement effective governance, and proactively respond to incidents. With a highlight on emerging technologies such as AI and blockchain, it guarantees your skillset meets evolving security threats and industry requirements. By addressing top-of-mind concerns like data breaches and ransomware attacks, crucial for IT professionals, this certification ensures you are staying ahead of the pace of change.

The CISM (Certified Information Security Manager) training course equips professionals with the knowledge and practical skills required to manage, govern, and lead enterprise information security programs. The course covers information security governance, risk management, security program development and management, and incident management, enabling participants to align cybersecurity with business objectives, manage security risks, develop effective security programs, and respond to information security incidents.

Course objectives

• Understand the principles of information security governance and management. Develop and align an enterprise information security strategy with business objectives. Identify, assess, and manage information security risks. Design, implement, and manage effective information security programs. Establish appropriate security policies, procedures, standards, and controls. Manage information security resources, capabilities, and performance. Develop effective incident management and response processes. Monitor, measure, and continuously improve the organization's information security program. Apply recognized security frameworks, standards, and best practices to support organizational resilience and compliance.

Who should attend

Course content

• Privacy Governance :Personal information Privacy principles Privacy by Design Privacy laws and regulations Privacy policies and documentation Data subject rights Vendor and supply-chain management Privacy incident management
• Privacy Risk Management & Compliance :Privacy risk management Privacy Impact Assessments(PIAs) Privacy threats and vulnerabilities Risk response Privacy frameworks Compliance monitoring Evidence and documentation Privacy metrics
• Data Life Cycle Management :Data inventory and classification Data-flow mapping Data quality Data minimization Data use and disclosure Data retention and archiving Data transfer Secure data destruction Data analytics and AI privacy considerations
• Privacy Engineering :Cloud and infrastructure technologies Devices and endpoints Connectivity Secure development lifecycle APIs and cloud-native services Identity and access management Encryption and hashing Monitoring and logging Anonymization and pseudo

General notes

• Participants receive comprehensive CISM training materials and reference resources to support effective learning before, during, and after the training. The package includes trainer-led presentation slides, participant training manuals, practical exercises, case studies, sample assessments, revision materials, practice questions, and recommended reference resources. Participants also receive guidance on relevant information security frameworks, standards, governance practices, risk management approaches, and incident management techniques to support practical application in the workplace and preparation for the CISM certification examination.

Schedule & fees