Key Features of the Course

Multiple video lessons covering the entire syllabus for the CISM exam
Exhaustive and detailed explanations in each lesson
Auto-updates to the ISACA CISM course
24*7 support from our Subject Matter Experts for Risk Management

Who should take the Certified Information Security Manager(CISM) certification exam?

This exam is for you, if you are an individual involved in the overseeing, designing, management, and assessment of an enterprise’s information security function.

This certification suits the following job roles:

IT Security Policy Makers and Auditors
IT Managers and Consultants
Information Security Managers and Officers
Network Administrators
Network Security Engineers

What are the prerequisites for the CISM certification exam?

CISM requires you to have a minimum of five years of experience in Information Security management.

What is the process for getting CISM certified?

The process follows as, you should

Pass the ISACA CISM exam within the last 5 years.
Carry the relevant full-time working experience as required.
Submit the application for the ISACA CISM certification along with the application processing fee.
Adhere to the Code of Professional Ethics and Continuing Professional Education Policy.

What skills will be measured in the CISM certification exam?

You will be tested in the following Information Security Management areas during the exam that are applicable across industry verticals. The work-related domains are:

Incident Management: This section will cover 30% of the exam objectives. This includes Incident Management Readiness and Operations which carries Incident Management Tools and Techniques, Incident Management Testing, Evaluation, and Training, Disaster Recovery Plan, Business Continuity Plan, Incident Classification and Response Plan, Business Impact Analysis, Incident Investigation, Evaluation, Containment Methods, Response Communications, Eradication and Recovery, and Post-Incident Review Practices.

Information Security Risk Management: This will entail 20% of the exam. It includes Information Security Risk Response and Risk Assessment which contains Risk Treatment and Response Options, Risk Reporting, Risk Monitoring, Risk and Control Ownership, Risk Assessment and Analysis, Emerging Risk and Threat Landscape, and Vulnerability and Control Deficiency Analysis.

Information Security Governance: This domain will cover 17% of the exam. It includes Information Security Strategy and Enterprise Governance which involves information Governance Standards and Frameworks, Information Security Strategy Development, Strategic Planning(resources, budgets, and business cases), Organizational Culture and Structures, Responsibilities and Roles, Regulatory, Legal, and Contractual Requirements.

Information Security Program: This section will cover 33% of the exam objective. This includes Information Security Program Development and Management. It comprises Information Security Control Selection and Design, Integration and Implementation, Evaluation and Testing, Information Security Training and Awareness, Information Security Program Communications and Reporting, External Services Management, Information Security Policies, Guidelines, Procedures, Program Resources and Metrics, Information Asset Identification and Classification, and Information Security Industry Standards and Frameworks.