Certified Information Security Manager (CISM)
Training at a glance
Level
Advanced
Duration
3 Days
Experience
5 years: IT & Security
Average Salary
$148,680
Labs
No
Level
Advanced
Duration
3 Days
Experience
5 years: IT & Security
Average Salary
$148,680
Labs
No
Training Details
Upon completion of the CISM exam preparation course, delegates will:
- Ensure that an enterprise’s information is protected
- Have the expertise needed to reduce risk and protect the enterprise
- Design, develop, implement, and manage an effective security management program
- Establish and maintain an IT governance framework aligned with business objectives
- Identify and manage information security risks
- Have an understanding of the format and structure of the CISM certification exam
- Have knowledge of the various topics and technical areas covered by the exam
- Practice with specific strategies, tips, and techniques for taking and passing the exam
- Explain how a Security Operations Center (SOC) operates and describe the different types of services that are performed from a Tier 1 SOC analyst’s perspective
- Explain Network Security Monitoring (NSM) tools that are available to the network security analyst
- Explain the data that is available to the network security analyst
- Describe the basic concepts and uses of cryptography
- Describe security flaws in the TCP/IP protocol and how they can be used to attack networks and hosts
- Understand common endpoint security technologies
- Understand the kill chain and the diamond models for incident investigations, and the use of exploit kits by threat actors
- Identify resources for hunting cyber threats
- Explain the need for event data normalization and event correlation
- Identify the common attack vectors
- Identify malicious activities
- Identify patterns of suspicious behaviors
- Conduct security incident investigations
- Explain the use of a typical playbook in the SOC
- Explain the use of SOC metrics to measure the effectiveness of the SOC
- Explain the use of a workflow management system and automation to improve the effectiveness of the SOC
- Describe a typical incident response plan and the functions of a typical Computer Security Incident Response Team (CSIRT)
- Explain the use of Vocabulary for Event Recording and Incident Sharing (VERIS) to document security incidents in a standard format
Designed for those who manage, design, oversee, and assess an enterprise’s information security function.
There are currently no prerequisites for this course.
Upcoming Classes
We Offer More Than Just ISACA Training
Our successful training results keep our corporate and military clients returning. That’s because we provide everything you need to succeed. This is true for all of our courses.
Strategic Planning & Project Management
From Lean Six Sigma to Project Management Institute Project Management Professional, Agile and SCRUM, we offer the best-in-class strategic planning and project management training available. Work closely with our seasoned multi-decade project managers.
IT & Cybersecurity
ATA is the leading OffSec and Hack the Box US training provider, and a CompTIA and EC-Council award-winning training partner. We offer the best offensive and defensive cyber training to keep your team ahead of the technology skills curve.
Leadership & Management
Let us teach your team the high-level traits and micro-level tools & strategies of effective 21st-century leadership. Empower your team to play to each others’ strengths, inspire others and build a culture that values communication, authenticity, and community.
