Certified Information Security Manager (CISM) Training

• How to move up in your career as an information security manager?
• How to achieve a global standard through CISM certification?
• How to create a better career pathway as an information security manager?
• How to get instant recognition with CISM credentials from your peers, managers, and external stakeholders?
• How to join the global network of over 46K+ CISM certified professionals globally?
• How to create a robust organization with minimal security chinks with international security practices?
• How to become a master of risk management, information security management, and incident management?

• Recorded Videos After Training
• Digital Learning Material
• Course Completion Certificate
• 24x7 After Training Support

• IT Managers
• Security Consultants
• Security Auditors
• System Security Architects
• Auditing Professionals
• Security Managers
• Chief Compliance Officers
• Information Security Managers
• ISO Professionals
• Anybody who wants to gain knowledge of CISM concepts in an enterprise set up
• Anybody who is looking pursue a career in the information security domain
• Anybody who is looking to clear their CISM Certification Exam
• Information Security/IT consultants
• Security Analysts

• Recorded Videos After Training
• Digital Learning Material
• Course Completion Certificate
• 24x7 After Training Support

• Multisoft Systems will provide you with a training completion certificate after completing this Certified Information Security Manager (CISM) Training.

Domain 1: Information Secuirty Governance (17%)

• Importance of Information Security Governance  
• Organizational Culture  
• Legal, Regulatory and Contractual Requirements  
• Organizational Structures, Roles and Responsibilities 

• Information Security Strategy Development 
• Information Governance Frameworks and Standards  
• Strategic Planning

Domain 2: Information Security Risk Management (20%)

• Emerging Risk and Threat Landscape 
• Vulnerability and Control Deficiency Analysis 
• Risk Analysis, Evaluation and Assessment  

Part B: Information Risk Response

• Risk Treatment/Risk Response Options 
• Risk and Control Ownership  
• Risk Monitoring and Reporting 

Domain 3: Information Security Program (33%)

• Information Security Program Overview 
• Information Security Program Resources 
• Information Asset Identification and Classification 
• Industry Standards and Frameworks for Information Security 
• Information Security Policies, Procedures and Guidelines 
• Defining an Information Security Program Road Map 
• Information Security Program Metrics 

• Information Security Control Design and Selection 
• Information Security Control Implementation and Integration 
• Information Security Control Testing and Evaluation 
• Information Security Awareness and Training 
• Integration of the Security Program with IT Operations 
• Management of External Services and Relationships 
• Information Security Program Communications and Reporting

Domain 4: Incident Management (30%) 

• Incident Management and Incident Response Overview  
• Incident Management and Incident Response Plans  
• Business Impact Analysis  
• Business Continuity Plan 
• Disaster Recovery Plan 
• Incident Classification/Categorization 
• Incident Management Training, Testing and Evaluation  

• Incident Management Tools and Technologies 
• Incident Investigation and Evaluation  
• Incident Containment Methods 
• Incident Response Communications 
• Incident Eradication and Recovery 
• Post-Incident Review Practices