{"product_id":"cism-certified-information-security-manager","title":"CISM Certified Information Security Manager","description":"\u003cdiv\u003e\n\u003cp\u003eThis four‑day exam preparation course equips learners with the essential knowledge and concepts needed to succeed on the CISM certification exam. Participants explore key domains, including Information Security Governance, Risk Management, Security Program Development, and Incident Management, strengthening their understanding of enterprise‑level security practices. Case studies and targeted practice questions reinforce learning and help participants confidently apply concepts in ways that directly support exam readiness.\u003c\/p\u003e\r\n\u003cp\u003e This course covers the four CISM domains:\u003c\/p\u003e\r\n\u003cul type=\"disc\"\u003e\r\n\u003cli\u003eInformation Security Governance\u003c\/li\u003e\r\n\u003cli\u003eInformation Security Risk Management\u003c\/li\u003e\r\n\u003cli\u003eInformation Security Program\u003c\/li\u003e\r\n\u003cli\u003eIncident Management\u003c\/li\u003e\r\n\u003c\/ul\u003e\r\n\u003cp style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"\u003eU.S. DoDM 8140.03 APPROVED BY DEPARTMENT OF DEFENSE\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eCISM Certified Information Security Manager Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eIn this course, you will:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eEstablish an information security governance framework\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eDevelop an information security strategy and business case\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eAssess threats, vulnerabilities, control deficiencies, and business impacts within the organization’s risk appetite.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eRecommend and monitor risk treatment strategies that assign ownership and reduce risk to acceptable levels.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eDevelop an information security program integrating security architecture, policies, resources, controls, and performance metrics.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eManage and evaluate program effectiveness, including control testing, security awareness, third-party security, and stakeholder reporting.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eEstablish incident management capabilities aligned with business continuity and disaster recovery requirements.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eDirect incident response activities and use exercises and post-incident reviews to strengthen organizational resilience.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eTraining Prerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eThere are no formal prerequisites to take the CISM exam or attend a CISM preparation course. However, to earn the CISM certification, candidates must:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eHave at least five years of professional information security management experience across at least three of the four CISM domains.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCertification Information\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eThe ISACA Exam Candidate Information Guide provides valuable information regarding exam day rules and information, as well as exam dates and deadlines. You can find the most recent version at: \u003ca href=\"https:\/\/www.isaca.org\/credentialing\/exam-candidate-guides\" rel=\"follow\"\u003ehttps:\/\/www.isaca.org\/credentialing\/exam-candidate-guides\u003c\/a\u003e\u003c\/p\u003e\n\u003cp\u003e\u003c\/p\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eCISM Certified Information Security Manager Training Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003e Domain 1 - Information Security Governance \u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eDescribe the role of governance in creating value for the enterprise.\u003c\/li\u003e\n\u003cli\u003eExplain the importance of information security governance in the context of overall enterprise governance.\u003c\/li\u003e\n\u003cli\u003eIdentify the relevant legal, regulatory, and contractual requirements that impact the enterprise.\u003c\/li\u003e\n\u003cli\u003eDescribe the influence of enterprise leadership, structure, and culture on the effectiveness of an information security strategy.\u003c\/li\u003e\n\u003cli\u003eDescribe the effects of the information security strategy on enterprise risk management.\u003c\/li\u003e\n\u003cli\u003eExplain the relationship between enterprise architecture (EA) and effective enterprise governance.\u003c\/li\u003e\n\u003cli\u003eEvaluate the common frameworks and standards used to govern an information security strategy.\u003c\/li\u003e\n\u003cli\u003eExplain why metrics are critical in developing and evaluating the information security strategy\u003cb\u003e. \u003c\/b\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003e Topics:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eOrganizational Purpose and Culture\u003c\/li\u003e\n\u003cli\u003eLegal, Regulatory, and Contractual Requirements\u003c\/li\u003e\n\u003cli\u003eOrganizational Structures, Roles, and Responsibilities\u003c\/li\u003e\n\u003cli\u003eInformation Security Strategy Development\u003c\/li\u003e\n\u003cli\u003eEnterprise Architecture\u003c\/li\u003e\n\u003cli\u003eInformation Governance Frameworks and Standards\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 2 – Information Security Risk Management \u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eApply risk assessment strategies to reduce the impact of information security risk.\u003c\/li\u003e\n\u003cli\u003eAssess the types of threats faced by the enterprise.\u003c\/li\u003e\n\u003cli\u003eExplain how security control baselines affect vulnerability and control deficiency analysis.\u003c\/li\u003e\n\u003cli\u003eDifferentiate between the application of risk treatment types from an information security perspective.\u003c\/li\u003e\n\u003cli\u003eDescribe the influence of risk and control ownership on the information security program.\u003c\/li\u003e\n\u003cli\u003eOutline the process of monitoring and reporting information security risk.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e \u003cb\u003eTopics: \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eEmerging Risk and Threat Landscape\u003c\/li\u003e\n\u003cli\u003eVulnerability and Control Deficiency Analysis\u003c\/li\u003e\n\u003cli\u003eRisk Assessment and Analysis\u003c\/li\u003e\n\u003cli\u003eRisk Treatment\/Risk Response Options\u003c\/li\u003e\n\u003cli\u003eRisk and Control Ownership\u003c\/li\u003e\n\u003cli\u003eRisk Monitoring and Reporting\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 3 – Information Security Program \u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eDescribe the goals and objectives of an information security architecture.\u003c\/li\u003e\n\u003cli\u003eOutline the components and resources used to build an information security program.\u003c\/li\u003e\n\u003cli\u003eDistinguish between common information security standards and frameworks available for building an information security program.\u003c\/li\u003e\n\u003cli\u003eExplain how to align information security policies, procedures, and guidelines with the needs of the enterprise.\u003c\/li\u003e\n\u003cli\u003eDescribe the process of defining an information security program road map.\u003c\/li\u003e\n\u003cli\u003eOutline key information security program metrics used to track and report progress to senior management.\u003c\/li\u003e\n\u003cli\u003eExplain how to manage the information security program using controls.\u003c\/li\u003e\n\u003cli\u003eCreate a strategy to enhance awareness and knowledge of the information security program.\u003c\/li\u003e\n\u003cli\u003eDescribe the process of integrating the security program with IT operations and third-party providers.\u003c\/li\u003e\n\u003cli\u003eCommunicate key security program information to relevant stakeholders.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e \u003cb\u003eTopics: \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eInformation Security Architecture\u003c\/li\u003e\n\u003cli\u003eInformation Security Program Resources\u003c\/li\u003e\n\u003cli\u003eInformation Security Industry Standards and Frameworks\u003c\/li\u003e\n\u003cli\u003eInformation Security Policies, Standards, Procedures, and Guidelines\u003c\/li\u003e\n\u003cli\u003eInformation Asset Identification and Classification\u003c\/li\u003e\n\u003cli\u003eInformation Security Control Design and Selection\u003c\/li\u003e\n\u003cli\u003eInformation Security Program Metrics Development\u003c\/li\u003e\n\u003cli\u003eInformation Security Control Implementation and Integrations\u003c\/li\u003e\n\u003cli\u003eInformation Security Control Testing and Evaluation\u003c\/li\u003e\n\u003cli\u003eInformation Security Awareness and Training\u003c\/li\u003e\n\u003cli\u003eManagement of External Services\u003c\/li\u003e\n\u003cli\u003eInformation Security Program Metrics, Communications, and Reporting\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 4 – Incident Management \u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eDistinguish between incident management and incident response.\u003c\/li\u003e\n\u003cli\u003eOutline the requirements and procedures necessary to develop an incident response plan.\u003c\/li\u003e\n\u003cli\u003eExplain the relationship between business impact, continuity, and incident response.\u003c\/li\u003e\n\u003cli\u003eDescribe the processes and outcomes related to disaster recovery.\u003c\/li\u003e\n\u003cli\u003eExplain the impact of metrics and testing when evaluating the incident response plan.\u003c\/li\u003e\n\u003cli\u003eIdentify techniques used to classify or categorize incidents.\u003c\/li\u003e\n\u003cli\u003eOutline the types of roles and responsibilities required for an effective incident management and response team.\u003c\/li\u003e\n\u003cli\u003eDistinguish between the types of incident management tools and technologies available to an enterprise.\u003c\/li\u003e\n\u003cli\u003eDescribe the processes and methods used to investigate, evaluate, and contain an incident.\u003c\/li\u003e\n\u003cli\u003eIdentify the types of communications and notifications used to inform key stakeholders of incidents and tests.\u003c\/li\u003e\n\u003cli\u003eOutline the processes and procedures used to eradicate and recover from incidents.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e \u003cb\u003eTopics: \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eIncident Response Plan\u003c\/li\u003e\n\u003cli\u003eBusiness Impact Analysis (BIA)\u003c\/li\u003e\n\u003cli\u003eBusiness Continuity Plan (BCP)\u003c\/li\u003e\n\u003cli\u003eDisaster Recovery Plan (DRP)\u003c\/li\u003e\n\u003cli\u003eIncident Classification\/Categorization\u003c\/li\u003e\n\u003cli\u003eIncident Management Training, Testing, and Evaluation\u003c\/li\u003e\n\u003cli\u003eIncident Management Tools and Techniques\u003c\/li\u003e\n\u003cli\u003eIncident Investigation and Evaluation\u003c\/li\u003e\n\u003cli\u003eIncident Containment Methods\u003c\/li\u003e\n\u003cli\u003eIncident Response Communications\u003c\/li\u003e\n\u003cli\u003eIncident Eradication and Recovery\u003c\/li\u003e\n\u003cli\u003ePost-incident Review Practices\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e","brand":"Learning Tree","offers":[{"title":"26AA06CN \/ 2026-10-20T09:00:00 \/ Online","offer_id":44748282626184,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"26BC03US \/ 2026-11-17T09:00:00 \/ Aurora, CO","offer_id":44748282757256,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"26CB38US \/ 2026-12-01T09:00:00 \/ Online","offer_id":44748282790024,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"26CB39US \/ 2026-12-08T09:00:00 \/ Austin","offer_id":44748282822792,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"26CB40US \/ 2026-12-15T09:00:00 \/ New York","offer_id":44748282855560,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"271A10CN \/ 2027-01-12T09:00:00 \/ Ottawa","offer_id":44748282888328,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"272A08CN \/ 2027-02-02T09:00:00 \/ Toronto","offer_id":44748282953864,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"272B31US \/ 2027-02-16T09:00:00 \/ Herndon, VA","offer_id":44774689570952,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"273B55US \/ 2027-03-16T09:00:00 \/ New York","offer_id":44891015741576,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"275B82US \/ 2027-05-04T09:00:00 \/ Bellevue, WA","offer_id":45100012109960,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"275B84US \/ 2027-05-25T09:00:00 \/ Austin","offer_id":45866394517640,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"276B72US \/ 2027-06-14T09:00:00 \/ Aurora, CO","offer_id":46109097230472,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"276A11CN \/ 2027-06-22T09:00:00 \/ Ottawa","offer_id":46128388276360,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"278A55CN \/ 2027-08-17T09:00:00 \/ Toronto","offer_id":46442909597832,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"279B13US \/ 2027-09-07T09:00:00 \/ Herndon, VA","offer_id":46492543320200,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"279B14US \/ 2027-09-21T09:00:00 \/ Austin","offer_id":46553192726664,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true},{"title":"27AB51US \/ 2027-10-12T09:00:00 \/ San Francisco","offer_id":67652647616648,"sku":"US-2036-IL","price":2549.0,"currency_code":"USD","in_stock":true}],"url":"https:\/\/kpit.learningtree.com\/products\/cism-certified-information-security-manager","provider":"Learning Tree International","version":"1.0","type":"link"}