• Develop and align information security strategies with business objectives.
• Identify, assess, and manage information security risks.
• Develop and manage information security programs.
• Select, implement, and evaluate security controls.
• Establish effective incident response and recovery processes.
• Manage security metrics, stakeholders, and third parties.
• Prepare for the CISM certification examination.

Domain 1: Information Security Governance

Domain 2: Information Security Risk Management

Domain 3: Information Security Program

Domain 4: Incident Management

32 Hours (4 Days)

• Certification: Certified Information Security Manager (CISM)
• Certifying Organization: ISACA
• Exam: CISM Certification Exam
• Questions: 150
• Duration: 4 hours

• Information Security Managers
• Cybersecurity Managers
• IT Managers and Directors
• Information Security Professionals
• IT Risk and Compliance Professionals
• Governance and GRC Professionals
• Security Consultants
• Professionals preparing for the CISM examination

• No mandatory prerequisite is required to take the CISM examination.
• Professional experience in information security management is strongly recommended.
• Candidates seeking the full CISM certification must meet ISACA's applicable experience requirements.