CISM Bootcamp

CISM - Certified Information Security Manager - certification preparation

This 4-day course will prepare for the CISM® exam Certified Information Security Manager, covering the entire CBK (Common Body of Knowledge) common core of knowledge in security defined ISACA®, Information Systems Audit and Control Association. The CISM certification is recognized worldwide.

Content

Domain 1: Information Security Governance
Domain 2: Information Risk Management and Compliance
Domain 3: Information Security Program Development and Management
Domain 4: Information Security Incident Management
Preparation and Certification

Participants

Information System (IS) Directors, auditors, responsible for business continuity or security, or for which the control of IS is fundamental in achieving their goals.

Prerequisites

Basic knowledge in Information Systems. Understanding English is necessary because the documentation is in English (the training is in French or English).

Program 

Domain 1: Information Security Governance

Alignment of policy security information on the business strategy and direction.

Policy security information development .

Commitment of senior management and support for information security across the enterprise.

Roles and responsibilities in the governance of information security.

Hands-on work
Questions from previous sessions (CISM or comparable examinations).

Domain 2: Information Risk Management and Compliance

Development of a systematic and analytical approach and the ongoing process of risk management.

Identification, analysis and risk assessment.

Definition of strategies risk treatment .

Risk management communication.

Domain 3: Information Security Program Development and Management

The safety information architecture.

Methods to define the required security measures.

Contract management and information security requirements.

Metrics and evaluation of IT security performance.

Domain 4: Information Security Incident Management

Components of a security incident management plan.

Concepts and practices in the management of security incidents.

Method classification.

Notification and escalation process.

Detection techniques and incidents analysis.

Preparation and Certification

Partial simulation of the review conducted at the end of training.

Subscribe to the www.isaca.org site, the registration deadline was made two months before the date of the examination.

Duration and conduct of the exam : 4 hours with 150 questions (review available only in English).