ISACA CISM Certification Certified Information Security Manager Courseware Courseware version 6.2 Kit Code: K-106-01 www.firebrandtraining.co.uk CISM™ Certified Information Security Manager Firebrand Custom Designed Courseware © 2016/71 /F2i0r1e7brand Logistics Start Time Breaks End Time Fire escapes Instructor Introductions © 2016/71 /F2i0r1e7brand © Firebrand Training Ltd 1 Introduction to Information Security Management © 2016/71 /F2i0r1e7brand Course Mission Educational Value • Both theoretical and practical • Up-to-date • Relevant © 2016/71 /F2i0r1e7brand © Firebrand Training Ltd 2 CISM Certified Information Security Manager • Designed for personnel that have (or want to have) responsibility for managing an Information Security program • Tough but very good quality examination • Requires understanding of the concepts behind a security program – not just the definitions © 2016/71 /F2i0r1e7brand CISM Exam Review Course Overview The CISM Exam is based on the CISM job practice. • The ISACA CISM Certification Committee oversees the development of the exam and ensures the currency of its content. There are four content areas that the CISM candidate is expected to know. © 2016/71 /F2i0r1e7brand © Firebrand Training Ltd 3 Job Practice Areas © 2016/71 /F2i0r1e7brand Domain Structure Information Security Governance mandates Information Risk Management drives Information Security Program Development and Management requires Information Security Incident influences Management informs Relationship between domains © 2016/71 /F2i0r1e7brand © Firebrand Training Ltd 4 CISM Qualifications To earn the CISM designation, information security professionals are required to: • Successfully pass the CISM exam • Adhere to the ISACA Code of Professional Ethics • Agree to comply with the CISM continuing education policy • Submit verified evidence of five (5) years of work experience in the field of information security. •Waivers are permitted for certifications © 2016/71 /F2i0r1e7brand The Examination © 2016/71 /F2i0r1e7brand © Firebrand Training Ltd 5 Description of the Exam The exam consists of 150 multiple choice questions that cover the CISM job practice areas. Four hours are allotted for completing the exam See the Job Practice Areas including task Statements and Knowledge Statements listed on the ISACA website © 2016/71 /F2i0r1e7brand Examination Day Be on time!! Nothing may be brought into the exam room • Breaks are permitted – but the clock does not stop All questions are multiple choice with four possible responses. • Only choose the ONE BEST answer Preliminary pass/fail results provided at completion of the exam • Detailed score provided via email in ten days © 2016/71 /F2i0r1e7brand © Firebrand Training Ltd 6 Completing the Examination Items • Read each question carefully • Read ALL answers prior to selecting the BEST answer • Mark the appropriate answer • Do not skip any questions •There is no penalty for guessing. Answer every question. © 2016/71 /F2i0r1e7brand Grading the Exam Candidate scores are reported as a scaled score based on the conversion of a candidate’s raw score on an exam to a common scale. ISACA uses and reports scores on a common scale from 200 to 800. A candidate must receive a score of 450 or higher to pass. Good Luck! © 2016/71 /F2i0r1e7brand © Firebrand Training Ltd 7 End of Introduction Welcome to the CISM course!! © 2016/71 /F2i0r1e7brand 2017 CISM Review Course Chapter 1 Information Security Governance © 2016/71 /F2i0r1e7brand © Firebrand Training Ltd 8 Information Security Governance Develop information security governance aligned with organisational objectives • Establish and/or maintain an information security governance framework and supporting processes to ensure that the information security strategy is aligned with organisational goals and objectives 17 © 2016/71 /F2i0r1e7brand Learning Objectives Understand the purpose of an information security governance, what it consists of and how to accomplish it Understand the purpose of an information security strategy, its objectives, and the reasons and steps required to develop one Understand the meaning, content, creation and use of policies, standards, procedures and guidelines and how they relate to one another © 2016/71 /F2i0r1e7brand © Firebrand Training Ltd 9