CISM Certification Training in New York

Syllabus of CISM Certification Online Training in New York

• 1.Establish and maintain an information security strategy, and align the strategy with corporate governance
• 2.Establish and maintain an information security governance framework
• 3.Establish and maintain information security policies
• 4.Develop a business case
• 5.Identify internal and external influences to the organization
• 6.Obtain management commitment
• 7.Define roles and responsibilities
• 8.Establish, monitor, evaluate, and report metrics

• 1.Establish a process for information asset classification and ownership
• 2.Identify legal, regulatory, organizational, and other applicable requirements
• 3.Ensure that risk assessments, vulnerability assessments, and threat analyses are conducted periodically
• 4.Determine appropriate risk treatment options
• 5.Evaluate information security controls
• 6.Identify the gap between current and desired risk levels
• 7.Integrate information risk management into business and IT processes
• 8.Monitor existing risk
• 9.Report noncompliance and other changes in information risk

• 1.Establish and maintain the information security program
• 2.Ensure alignment between the information security program and other business functions
• 3.Identify, acquire, manage, and define requirements for internal and external resources
• 4.Establish and maintain information security architectures
• 5.Establish, communicate, and maintain organizational information security standards, procedures, and guidelines
• 6.Establish and maintain a program for information security awareness and training
• 7.Integrate information security requirements into organizational processes
• 8.Integrate information security requirements into contracts and activities of third parties
• 9.Establish, monitor, and periodically report program management and operational metrics

• 1.Establish and maintain an organizational definition of, and severity hierarchy for, information security incidents
• 2.Establish and maintain an incident response plan
• 3.Develop and implement processes to ensure the timely identification of information security incidents
• 4.Establish and maintain processes to investigate and document information security incidents
• 5.Establish and maintain incident escalation and notification processes
• 6.Organize, train, and equip teams to effectively respond to information security incidents
• 7.Test and review the incident response plan periodically
• 8.Establish and maintain communication plans and processes
• 9.Conduct post-incident reviews
• 10.Establish and maintain integration among the incident response plan, disaster recovery plan, and business continuity plan