$ 9.90$ 35.0072% Off

Select Payment Type:

Pay for Course Enrollment

Gift the Course

Purchase Bulk Licenses

Enroll using License Key

The payment is charged in local currency

$ 9.90$ 35.0072% Off

Select Payment Type:

Pay for Course Enrollment

Gift the Course

Purchase Bulk Licenses

Enroll using License Key

The payment is charged in local currency

Home CoursesCyberEdge Technologies

CISM Masterclass: Complete Certified Information Security Manager Training & ISACA Exam Prep

Name: CISM Masterclass: Complete Certified Information Security Manager Training & ISACA Exam Prep
Price: 9.9 USD
Availability: InStock
Rating: 4.5 ((3259) reviews)

The CISM Masterclass: Complete Certified Information Security Manager Training & ISACA Exam Prep is a comprehensive program designed for professionals aiming to advance into high-level information security management roles. This course provides deep mastery of the skills required t

2 Enrolled

English

4.5 (3.3k)

8 Modules

Gain insight into a topic and learn the fundamentals.

Intermediate

Some prior experience recommended

Self-paced

Flexible deadline. Learn at your own pace.

What you'll learn

Information Security Governance

Information Risk Management

Information Security Program Development & Management

Information Security Incident Management

Skills you'll gain

Ability to manage the full incident response lifecycleCybersecurity GovernanceData EngineeringProblem-solving under exam conditions

Pre-requisite

5 years of professional information security experience
3 years across three or more CISM domains

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

0 assignments

Taught in English

Why iqrasity

Certified, accredited, and experienced instructors

Comprehensive question bank covering all domains

Course content based on the latest exam syllabus

Proven track record of learner success across industries

Long-term access to all learning materials and updates

Rigorous assessments to ensure complete mastery

Issuance of shareable, digitally verifiable certificate

Highly affordable and self-paced

Digital Certificate

Course Content

8 sections•547 lectures• total length

CISM Masterclass: (56Notes - 415Lectures )

1 lectures

Announcements

Module 0: Introduction to the CISM (8Lectures)

8 lectures

Introduction to the CISM Exam Preparation-1

Getting Started Planning Your Study-2

Using the CISM Review Manual Effectively-3

Types of Questions on the CISM Exam-4

Using ISACA Exam Preparation Resources-5

CISM Review Questions, Answers & Explanations Manual-6

CISM Review QAE Database (12-Month Access)-7

Important Final Note on Exam Preparation-8

Module 1: Information Security Governance (9Notes - 68Lectures)

86 lectures

Information Security Governance 01 (3:00 min)

Overview Information Security Governance 02 (2:47 min)

Domain 1 Exam Content Outline 03 (3:12 min)

Enterprise Governance

Part A Enterprise Governance pdf

1.1 Importance of Information Security Governance

Notes: Importance of Information Security Governance

Importance of Information Security Governance 1.1/1 (3:35 min)

Importance of Information Security Governance 1.2/2 (3:12 min)

Scope and Charter of information Security Governance 1.1.1/3 (3:33 min)

Outcomes of Information Security Governance 1.1.2/4 (3:12 min)

1.2 Organizational Culture

Notes: Organizational Culture 1.2

Organizational Culture 1.2/1 (3:10 min)

Acceptable Use Policy (AUP) 1.2.1/2 (3:3 min)

Ethics in Information Security 1.2.2/3 (3:13 min)

1.3 Legal, Regulatory and Contractual Requirements

Notes : Legal, Regulatory and Contractual Requirements 1.3

Legal, Regulatory & Contractual Requirements 1.3/1 (3:21 min)

Business Record Content & Retention Requirements 1.3.1/2 (2:31 min)

1.4 Organizational Structures, Roles and Responsibilities

Notes: Organizational Structures, Roles and Responsibilities 1.4

Organizational Structures, Roles & Responsibilities 1.4/1 (3:13 min)

Roles and Responsibilities in Security Governance 1.4.1/2 (2:35 min)

Skills in Defining Roles & Responsibilities 1.4.1.1/3 (2:58 min)

Role of the Board of Directors in Security Governance 1.4.1.2/4 (3:18 min)

Role of Senior Management in Security Governance 1.4.1.3/5 (3:3 min)

Role of Business Process Owners (BPOs) 1.4.1.4/6 (2:42 min)

Chief Information Security Officer (CISO) 1.4.1.5/7 (3:12 min)

Risk Management Roles & Responsibilities 1.4.1.6/8 (2:57 min)

Part B Information Security Strategy

Part B Information Security Strategy pdf

1.5 Information Security Strategy Development

Notes: Information Security Strategy Development 1.5

Information Security Strategy Development 1.5/1 (2:39 min)

Business Goals and Objectives 1.5.1/2 (2:52 min)

Information Security Strategy Objectives 1.5.2/3 (3:14 min)

Ensuring Objective and Business Integration 1.5.3/4 (2:54 min)

Business Linkages in Information Security Strategy 1.5.3.1/5 (2:58 min)

Avoiding Common Pitfalls and Bias 1.5.4/6 (3:25 min)

Defining the Desired State of Information Security 1.5.5/7 (2:52 min)

Business Model for Information Security (BMIS) 1.5.5.1/8 (3:26 min)

Dynamic Interconnections in BMIS 1.5.5.2/9 (3:21 min)

Governance, Risk Management & Compliance (GRC) 1.5.5.3/10 (3:31 min)

Information Security Strategy Development 1.5.6/11 (2:56 min)

Elements of a Strategy 1.5.7/12 (2:56 min)

Resources and Constraints Overview 1.5.7.1/13 (3:24 min)

Constraints in Information Security Strategy 1.5.7.2/14 (3:24 min)

1.6 Information Governance Frameworks and Standards

Notes: Information Governance Frameworks and Standards 1.6

Information Governance Frameworks and Standards 1.6/1 (2:43 min)

Balanced Scorecard in Information Security Governance 1.6.1/2 (3:08 min)

Architectural Approaches in Information Security 1.6.2/3 (2:56 min)

Enterprise Risk Management (ERM) Frameworks 1.6.3/4 (2:53 min)

ISOIEC 27000 Series for Information Security 1.6.4.1/5(2:56 min)

NIST Cybersecurity Framework (CSF) 1.6.4.2/6 (2:24 min)

NIST Risk Management Framework (RMF) 1.6.4.3/7 (3:04 min)

Other Approaches to Information Security Strategy 1.6.4.4/8 (3:42 min)

1.7 Strategic Planning

Notes: Strategic Planning 1.7

Strategic Planning 1.7/1 (2:47 min)

Workforce Composition and Skills 1.7.1/2 (2:42 min)

Organizational Structure and Its Impact 1.7.1.1/3 (3:08 min)

Centralized vs. Decentralized Security Approaches 1.7.1.2/4 (3:07 min)

Employee Roles & Responsibilities 1.7.1.3/5 (2:29 min)

Skills for Security Strategy Implementation 1.7.1.4/6 (2:48 min)

Awareness and Education 1.7.1.5/7 (2:45 min)

Assurance Provisions 1.7.2/8 (2:54 min)

Audits 1.7.2.1/9 (3:21 min)

Compliance Enforcement 1.7.2.2/10 (3:17 min)

Risk Assessment and Management 1.7.3/11 (3:05 min)

Business Impact Analysis (BIA) 1.7.3.1/12 (2:48 min)

Resource Dependency Analysis 1.7.3.2/13 (2:32 min)

Outsourced Services in Security Strategy 1.7.3.3/14 (3:19 min)

Threat Assessment 1.7.3.4/15 (2:56 min)

Vulnerability Assessment 1.7.3.5/16 (2:48 min)

Insurance as a Risk Treatment 1.7.3.6/17 (3:08 min)

Organizational Support and Assurance Providers 1.7.3.7/18 (3:14 min)

Action Plan to Implement Strategy 1.7.4/19 (2:31 min)

Gap Analysis Basis for an Action Plan 1.7.4.1/20 (2:56 min)

Action Plan Metrics 1.7.4.2/21 (2:49 min)

Key Goal Indicators (KGIs) 1.7.4.3/22 (2:20 min)

Key Performance Indicators (KPIs) 1.7.4.4/23 (2:29 min)

General Metrics Considerations 1.7.4.5/24 (2:37 min)

Action Plan Intermediate Goals 1.7.4.6/25 (2:56 min)

Information Security Program Objectives 1.7.5/26 (3:10 min)

Module 2: Information Security Risk Management (8Notes - 67Lectures)

83 lectures

Information Security Risk Management 01 (2:45 min)

1 Domain 2 Exam Content Outline (2:52 min)

Learning Objectives Task Statements Chapter 2 (3:07 min)

Overview Information Security Risk Management (2:31 min)

Part A Information Risk Assessment

Part A Information Risk Assessment Notes

05 Part A Information Risk Assessment (6:55 min)

06 Part A Information Risk Assessment (3:04 min)

2.1 Emerging Risk and Threat Landscape

Emerging Risk and Threat Landscape 2.1

Emerging Risk and Threat Landscape 2.1/1 (2:46 min)

Risk Identification 2.1.1/2 (2:57 min)

Threats 2.1.2/3 (3:05 min)

Internal Threats 2.1.2.1/4 (3:03 min)

External Threats 2.1.2.2/5 (3:04 min)

Advanced Persistent Threats (APTs) 2.1.2.3/6 (3:20 min)

Defining a Risk Management Framework 2.1.3/7 (3:27 min)

Defining the External Environment 2.1.3.1/8 (3:08 min)

Defining the External Environment 2.1.3.2/9 (2:56 min)

Risk, Likelihood and Impact 2.1.4/10 (2:40 min)

Risk Register 2.1.5/11 (2:43 min)

Emerging Threats 2.1.6/12 (2:53 min)

2.2 Vulnerability and Control Deficiency Analysis

Vulnerability and Control Deficiency Analysis 2.2

Vulnerability and Control Deficiency Analysis 2.2/1 (3:14 min)

Security Control Baselines 2.2.1/2 (2:54 min)

Events Affecting Security Baselines 2.2.2/3 (3:01 min)

2.3 Risk Analysis, Evaluation and Assessment

Risk Analysis, Evaluation and Assessment 2,3

Risk Analysis, Evaluation and Assessment 2.3/1 (2:51 min)

Determining the Risk Management Context 2.3.1/2 (2:32 min)

Operational Risk Management 2.3.2/3 (2:53 min)

Risk Management Integration with IT Life Cycle Management Processes 2.3.3/4 (2:56 min)

Risk Scenarios 2.3.4/5 (2:31 min)

Risk Assessment Process 2.3.5/6 (3:22 min)

Risk Assessment & Analysis Methodologies 2.3.6/7 (3:05 min)

NIST Risk Assessment Methodology 2.3.6.1/8 (3:08 min)

Cascading Risk 2.3.6.2/9 (2:44 min)

Other Risk Assessment Approaches 2.3.7/10 (2:36 min)

Holistic Approach to Risk Management (HARM) 2.3.7.1/11 (2:33 min)

Probabilistic Risk Assessment 2.3.7.2/12 (3:00 min)

Risk Analyasis 2.3.8/13 (2:34 min)

Gap Analysis 2.3.8.1/14 (2:04 min)

Qualitative Risk Analysis 2.3.8.2/15 (1:51 min)

Semi-Quantitative (Hybrid) Risk Analysis 2.3.8.3/16 (2:05 min)

Quantitative Analysis 2.3.8.4/17 (2:31 min)

Annual Loss Expectancy 2.3.8.5/18 (2:12 min)

Value at Risk (VaR) in Risk 2.3.8.6/19 (2:32 min)

Other Risk Analysis Methods 2.3.8.7/20 (3:00 min)

Risk Evaluation 2.3.9/21 (2:18 min)

Risk Ranking 2.3.10/22 (2:32 min)

Part B Information Risk Response

Part B Information Risk Response Notes

44 Part B Information Risk Response (2:45 min)

2.4 Risk Treatment Risk Response Options

Risk Treatment Risk Response Options 2.4

Risk Treatment Risk Response Options 2.4/1 (2:15 min)

Determining Risk Capacity and Acceptable Risk (Risk Appetite) 2.4.1/2 (2:38 min)

Risk Response Options 2.4.2/3 (2:40 min)

Terminate the Activity 2.4.2.1/4 (2:22 min)

Transfer the Risk 2.4.2.2/5 (2:12 min)

Mitigate the Risk 2.4.2.3/6 (2:16 min)

Accept the Risk 2.4.2.4/7 (3:24 min)

Inherent and Residual Risk 2.4.4/8 (2:22 min)

Impact 2.4.5/9 (2:34 min)

Controls 2.4.6/10 (2:30 min)

Legal and Regulatory Requirements 2.4.7/11 (2:39 min)

Costs and Benefits 2.4.8/12 (2:18 min)

2.5 Risk and Control Ownership

Notes: Risk and Control Ownership 2.5

Risk and Control Ownership 2.5/1 (2:22 min)

Risk Ownership and Accountability 2.5.1/2 (2:25 min)

Risk Owner 2.5.2/3 (2:22 min)

Control Owner 2.5.3/4 (2:40 min)

2.6 Risk Monitoring and Reporting

Notes: Risk Monitoring and Reporting 2.6

Risk Monitoring and Reporting 2.6/1 (2:20 min)

Risk Monitoring 2.6.1/2 (2:14 min)

Key Risk Indicators 2.6.2/3 (2:40 min)

Reporting Changes in Risk 2.6.3/4 (2:41 min)

Risk Communication, Awareness and Consulting 2.6.4/5 (2:42 min)

Risk Awareness 2.6.4.1/6 (2:36 min)

Documentation 2.6.5/7 (1:18 min)

Module 3: Information Security Program Management (16Notes - 178Lectures)

220 lectures

Information Security Program Development & Management-3/1

Overview Information Security Program Development & Management-3/2

Part A Information Security Program Development

Part A Information Security Program Development pdf

Part A – Information Security Program Development (3:04 min)

3.1 Information Security Program Overview

Notes: Information Security Program Overview 3.1

Information Security Program Overview 3.1/1 (2:49 min)

Information Security Management Trends 3.1.1/2 (2:33 min)

Essential Security Program Elements 3.1.2/3 (3:06 min)

Importance of the Information Security Program 3.1.3/4 (2:35 min)

Applying the Security Program Business Case 3.1.4/5 (2:39 min)

Outcomes of Information Security Program Management 3.1.5/6 (2:31 min)

Risk Management in Information Security 3.1.5.1/7 (2:47 min)

Value Delivery in Information Security 3.1.5.2/8 (2:41 min)

Resource Management in Information Security 3.1.5.3/9 (3:08 min)

Performance Measurement in Information Security 3.1.5.4/10 (2:56 min)

Assurance Process Integration 3.1.5.5/11 (2:45 min)

3.2 Information Security Program Resources

Notes: Information Security Program Resources 3.2

Information Security Program Resources 3.2/1 (2:26 min)

Information Security Program Objectives 3.2.1/2 (2:19 min)

Defining Objectives of the Information Security Program 3.2.1.1/3 (2:35 min)

Concepts Information Security Program 3.2.2/4 (2:25 min)

Management and Process Concepts in Security Program Implementation 3.2.2.1/5 (2:35 min)

Technology Resources in an Information Security Program 3.2.2.2/6 (2:50 min)

Scope and Charter of an Information Security Program 3.2.3/7 (2:28 min)

Common Information Security Program 3.2.4/8 (3:08 min)

The Critical Role of Management Support 3.2.4.1/9 (2:35 min)

Overcoming Funding Challenges in InfoSec 3.2.4.2/10 (3:01 min)

Staffing Challenges in Information Security 3.2.4.3/11 (2:38 min)

Common Constraints in Information Security Program Development 3.2.5/12 (3:35 min)

Physical Constraints in Information Security Programs 3.2.5.1/13 (2:27 min)

Ethical Considerations in Information Security Programs 3.2.5.2/14 (2:13 min)

The Role of Culture in Information Security Programs 3.2.5.3/15 (3:09 min)

The Impact of Organizational Structure on Information Security 3.2.5.4/16 (2:33 min)

Managing Costs in Information Security Program Implementation 3.2.5.5/17 (2:33 min)

Cost Justification and ROI in Security Programs 3.2.5.6/18 (2:35 min)

Personnel Resistance in Security Program Implementation 3.2.5.7/19 (2:15 min)

Resource Planning for Effective Security Strategy 3.2.5.8/20 (2:18 min)

Life Cycle of Security Resources 3.2.5.9/21 (1:35 min)

Time as a Strategic Constraint 3.2.5.10/22 (02:31 min)

Technology as a Constraint in Security Strategy Implementation 3.2.5.11/23 (2:30 min)

3.3 Information Asset Identification and Classification

Notes: Information Asset Identification and Classification 3.3

Information Asset Identification and Classification 3.3/1 (2:42 min)

Information Asset Identification and Valuation 3.3.1/2 (2:23 min)

Information Asset Valuation Stratégies 3.3.2/3 (2:08 min)

Information Asset Classification 3.3.3/4 (2:28 min)

Information Asset Classification Benefits & Key Questions 3.3.3.1/5 (2:36 min)

Determining Asset Criticality & Impact of Adverse Events 3.3.4/6 (2:43 min)

3.4 Industry Standards and Frameworks for Information Security

Notes: Industry Standards and Frameworks for Information Security 3.4

Industry Standards and Frameworks for Information Security 3.4/1 (2:24 min)

Enterprise Information Security Architectures 3.4.1/2 (2:50 min)

Alternative Frameworks for Enterprise & Security Architecture 3.4.1.1/3 (2:27 min)

Enterprise Architecture Domains & Layers 3.4.1.2/4 (2:32 min)

Objectives of Information Security Architectures 3.4.1.3/5 (2:20 min)

Information Security Management Frameworks 3.4.2/6 (2:37 min)

COBIT and Its Role in Information Security Governance 3.4.2.1/7 (2:23 min)

ISOIEC 27001 and the ISO 27000 Series in ISM 3.4.2.2/8 (2:34 min)

NIST Cybersecurity Framework (CSF) 3.4.2.3/9 (2:39 min)

NIST Risk Management Framework (RMF) 3.4.2.4/10 (2:34 min)

Information Security Framework Components 3.4.3/11 (2:32 min)

Technical Components of Information Security 3.4.3.1/12 (2:39 min)

3.4.3.2 Operational Components of Information Security

3.4.3.3 Management Components of Information Security

3.4.3.4 Administrative Components of Information Security

3.4.3.5 Educational & Informational Components of InfoSec

3.5 Information Security Policies, Procedures and Guidelines

3.5 Notes

3.5 Information Security Policies, Procedures and Guidelines

3.5.1 Information Security Policies

3.5.1.1 Policy Development in Information Security

3.5.2 Information Security Standards

3.5.2.1 Developing Effective Information Security Standards

3.5.3 Information Security Procedures

3.5.4 Guidelines in Information Security

3.6 Defining an Information Security Program Road Map

3.6 Notes

3.6.1 Applying Frameworks and Architectures to Build a Security Program Road Map

3.6.2 Developing an Information Security Program Road Map

3.6.2 Simplicity & Clarity Through Layering and Modularization

3.6.2.1 Gap Analysis as the Basis for an Action Plan

3.6.3 Business Focus Beyond the Technical Domain

3.6.3 Life Cycle Principles Supporting the Road Map

3.6.4 Architecture and Control Objectives

3.6.5 Architecture Implementation in Security Programs

3.6.6 Security Program Management & Administrative Activities

3.6.7 Program Administration in Information Security

3.7 Information Security Program Metrics

3.7 Notes

3.7.1 Effective Security Metrics

3.7.1.1 Standards and Approaches for Security Metrics

3.7.1.2 Governance Implementation Metrics

3.7.1.3 Strategic Alignment Metrics

3.7.1.4 Risk Management Metrics

3.7.1.5 Value Delivery Metrics

3.7.1.6 Resource Management Metrics

3.7.1.7 Performance Measurement in Information Security

3.7.2 Security Program Metrics & Monitoring

3.7.3 Metrics Tailored to Enterprise Needs

3.7.3.1 Strategic Metrics for Information Security

3.7.3.2 Management Metrics for Information Security

3.7.3.3 Operational Metrics in Information Security

Part B Information Security Program Management

Part B Information Security Program Management Notes

3.8 Information Security Control Design and Selection

3.8 Notes

3.8 Information Security Control Design and Selection

3.8.1 Managing Risk Through Controls

3.8.1.1 IT Controls

3.8.1.2 Non-IT Controls

3.8.1.3 Layered Defenses (Defense in Depth)

3.8.1.4 Technologies in Information Security

3.8.2 Controls and Countermeasures

3.8.3 Control Categories

3.8.4 Control Design Considerations

3.8.5 Control Methods

3.8.5.1 Countermeasures in Information Security

3.8.5.2 Physical and Environmental Controls

3.8.5.3 Control Technology Categories

3.8.5.4 Native Control Technologies

3.8.5.5 Supplemental Control Technologies

3.8.5.6 Management Support Technologies

3.8.5.7 Technical Control Components and Architecture

3.9 Information Security Control Implementation and Integration

3.9 Notes

3.9 Information Security Control

3.9.1 Baseline Controls

3.10 Information Security Control Testing and Evaluation

3.10 Notes

3.10 Information Security Control Testing and Evaluation

3.10.1 Control Strength

3.10.2 Control Recommendations

3.10.3 Control Testing and Modification

3.11 Information Security Awareness and Training

3.11 Notes

3.11 Information Security Awareness and Training

3.11.1 Security Awareness Training and Education

3.11.2 Developing an Information Security Awareness Program

3.11.3 Role-Based Training

3.12 Integration of the Security Program With IT Operations

3.12 Notes

3.12.1 Personnel, Roles, Skills and Culture

3.12.1.1 Documentation in Information Security Programs

3.12.1.2 Document Maintenance in Information Security Programs

3.12.2 Information Security Liaison Responsibilities

3.12.2.1 PhysicalCorporate Security

3.12.2.2 IT Audit

3.12.2.3 Role of Information Technology in Security Programs

3.12.2.4 Role of Business Unit Managers in Information Security

3.12.2.5 Human Resources & Information Security

3.12.2.6 Legal Department & Information Security

3.12.2.7 Employees The First Line of Defense

3.12.2.7 Procurement A Critical Security Touchpoint

3.12.2.8 Compliance Aligning Security with Legal and Regulatory Demands

3.12.2.9 Privacy Enforcing Data Protection in a Regulated World

3.12.2.10 Training Partnering for Security Awareness & Skill Development

3.12.2.11 Quality Assurance Integrating Security into QA Processes

3.12.2.12 Insurance as a Compensating Control in Information Security

3.12.2.13 Third Party Management in Information Security

3.12.2.14 Role of the PMO in Information Security

3.12.3 Cross-Organizational Responsibilities

3.12.3.1 Information Security Leadership & Cross-Business Alignment

3.12.4 Issue Resolution through the Information Security Program

3.12.5 Integration With IT Processes

3.12.5.1 Integration of Information Security Across the Enterprise

3.12.5.1 Vendor Management in Information Security

3.12.5.2 Physical and Environmental Factors in Information Security

3.12.5.2 System Development Life Cycle (SDLC) & Security Integration

3.12.5.3 Cultural and Regional Variances in Information Security

3.12.5.3 DevOps and DevSecOps Security in High-Speed Development

3.12.5.4 Change Management in Information Security

3.12.5.4 Logistics in Information Security Management

3.12.5.5 Configuration Management in Information Security

3.12.5.6 Secure Release Management

3.12.6 Cloud Computing

3.12.6.1 Cloud Service Models

3.12.6.2 Advantages of Cloud Computing

3.12.6.3 Evaluation of Cloud Service Providers

3.13 Management of External Services and Relationships

3.13 Notes

3.13 Management of External Services and Relationships

3.13.1 Governance of Third-Party Relationships

3.13.2 Third-Party Service Providers

3.13.2.1 Outsourcing and Third-Party Security Providers

3.13.3 Outsourcing Challenges

3.13.5 Third-Party Access

3.13.4.1 Security Provisions in Outsourcing Contracts

3.13.4 Outsourcing Contracts

3.14 Information Security Program Communications and Reporting

3.14 Notes

3.14 Information Security Program

3.14.1 Program Management Evaluation

3.14.1.1 Compliance Requirements in Information Security

3.14.1.2 Program Management in Information Security

3.14.1.3 Security Operations Management

3.14.1.4 Technical Security Management

3.14.1.5 Resource Levels in Information Security Program

3.14.2 The Plan-Do-Check-Act Cycle

3.14.3 Security Reviews and Audits

3.14.3.1 Security Reviews vs. Audits

3.14.4 Compliance Monitoring and Enforcement

3.14.4.1 Standards Compliance

3.14.4.2 Resolution of Noncompliance Issues

3.14.4.3 Resolution of Noncompliance Issues

3.14.4.4 Compliance Enforcement

3.14.5 Monitoring Approaches

3.14.5.1 Monitoring Security Activities in Infrastructure and Applications

3.14.5.2 Determining Success of Information Security Investments

3.14.6 Measuring Information Security Management Performance

3.14.6.1 Measuring Support of Organizational Objectives

3.14.6.2 Measuring Compliance in Information Security

3.14.6.3 Measuring Operational Productivity in InfoSec

3.14.6.4 Measuring Security Cost-Effectiveness

3.14.6.5 Measuring Awareness & Technical Security Effectiveness

3.14.6.6 Measuring Effectiveness of Management Framework & Resources

3.14.6.7 Measuring Operational Performance in InfoSec

3.14.6.8 Ongoing Monitoring and Communication

Module 4: Incident Management (14Notes - 93Lectures)

148 lectures

Incident Management-4/1

Part A Incident Management Readiness

Part A Incident Management Readiness Notes

Part A Incident Management Readiness-1

4.1 Incident Management and Incident Response Overview

4.1 Notes

Incident Management & Response-4.1/1

Incident Management vs. Incident Response-4.1/2

Goals of Incident Management & Response-4.1/3

Goals & Value of Effective Incident Management-4.1/4

Incident Handling & Life Cycle-4.1/5

Incident Management Life Cycle & Disaster Progression-4.1/6

4.2 Incident Management and Incident Response Plans

4.2 Notes

Incident Management and Incident Response Plans-4.2/1

Importance of Incident Management-4.2/2

Outcomes of Incident Management-4.2/3

Incident Management Resources-1-4.2/4

Incident Management Resources-2-4.2/4

Policies and Standards-4.2/5

Incident Management Objectives-4.2/6

Strategic Alignment-4.2/7

Response and Recovery Plan-4.2/8

The Role of the Information Security Manager in Incident Management-4.2/9

Risk Management-4.2/10

Assurance Process Integration-4.2/11

Value Delivery-4.2/12

Resource Management-4.2/13

Defining Incident Management Procedures-4.2/14

Detailed Plan of Action for Incident Management-4.2/15

Phase 1 – Prepare (Prepare Improve Sustain)-4.2/16

Phase 2 – Protect (Reputation, Brand, Infrastructure, Data)-4.2/17

Phase 3 – Detect (Events Incidents Anomalies)-4.2/18

Phase 4 Triage-42/19

Phase 5 Respond-4.2/20

Current State of Incident Response Capability-4.2/21

History of Incidents-4.2/22

Threats to Enterprise Security-4.2/23

Vulnerabilities-4.2/24

Developing an Incident Response Plan (IRP)-4.2/25

Elements of an Incident Response Plan (IRP)-4.2/26

Gap Analysis Basis for an Incident Response Plan-4.2/27

Logistics in Incident Response and Recovery-4.2/28

Incident Management and Response Teams-4.2/29-1

Incident Management and Response Teams-4.2/29-2

Organizing, Training, and Equipping the Response Staff-4.2/30

Incident Notification Process-4.2/31-1

Incident Notification Process-4.2/31-2

Challenges in Developing an Incident Management Pian-4.2/32

4.3 Business Impact Analysis

4.3 Notes

Business Impact Analysis-4.3/1

Elements of a Business Impact Analysis (BIA)-4.3/2

Benefits of Conducting a Business Impact Analysis-4.3/3

4.4 Business Continuity Plan

4.4 Notes

Business Continuity Plan-4.4/1

Integrating Incident Response with Business Continuity-4.4/2

Network Methods for Providing Continuity of Services-4.4/3

High-Availability Considerations-4.4/4

Insurance-4.4/5

4.5 Disaster Recovery Plan

4.5 Notes

4.5 Disaster Recovery Plan

4.5.1 Business Continuity and Disaster Recovery Procedures

4.5.2 Recovery Operations

4.5.3 Evaluating Recovery Strategies

4.5.4 Addressing Threats

4.5.5 Recovery Sites

4.5.6 Basis for Recovery Site Selections

4.5.7 Response and Recovery Strategy Implementation

4.6 Incident ClassificationCategorization

4.6 Notes

4.6 Incident ClassificationCategorization

4.6.1 Escalation Process for Effective Incident Management

4.6.2 Identifying HelpService Desk Processes for Security Incidents

4.7 Incident Management Training, Testing and Evaluation

4.7 Notes

Incident Management Training, Testing, and Evaluation-4.7/1

Incident Management Roles and Responsibilities-4.7/2

Common Roles in Incident Management-4.7/3

Senior Management Commitment-4.7/4

Responsibilities of the Information Security Manager in Incident Management-4.7/5

Incident Management Metrics and indicator-4.7/6

Recovery Time Objectives (RTOs)-4.7/7

RTO in Business Continuity & Contingency Planning-4.7/8

Recovery Point Objective (RPO)-4.7/9

Service Delivery Objectives (SDOs)-4.7/10

Maximum Tolerable Outage (MTO)-4.7/11

Allowable Interruption Window (AIW)-4.7/12

Recovery Point Objectives (RPO)-4.7/13

Service Delivery Objectives (SDOs)-4.7/14

Maximum Tolerable Outage (MTO)-4.7/15

Performance Measurement-4.7/16

Updating Recovery Plans-4.7/17

Testing Incident Response and Business ContinuityDisaster Recovery Plans-4.7/18

Periodic Testing of Response & Recovery Plans-4.7/19

Testing for Infrastructure & Critical Business Applications-4.7/20

Types of Tests-4.7/21

Test Results-4.7/22

Recovery Test Metrics-4.7/22

Part B Incident Management Operations

Part B Incident Management Operations Notes

Part B Incident Management Operations-1

4.8 Incident Management Tools and Technologies

4.8 Notes

Incident Management Tools and Technologies-4.8/1

Incident Management Systems-4.8/2

Endpoint Detection and Response (EDR)-4.8/3

Extended Detection and Response (XDR)-4.8/4

Managed Detection and Response (MDR)-4.8/5

Incident Response Technology Foundations-4.8/6

Incident Response Operating Systems Knowledge-4.8/7

Malicious Code Propagation & Impact-4.8/8

Programming Skills for Incident Response Teams-4.8/9

Incident Response Team (IRT) Organization Models-4.8/10

Incident Response Team (IRT) Roles & Responsibilities-1-4.8/11

Incident Response Team (IRT) Roles & Responsibilities-2-4.8/11

Skills-4.8/12

Awareness and Education-4.8/13

Audits in Incident Management-4.8/14

Outsourced Security Providers-4.8/15

4.9 Incident Investigation and Evaluation

4.9 Notes

Incident Investigation and Evaluation-4.9/1

Executing Response and Recovery Plans-4.9/2

Ensuring Execution as Required-4.9/3

4.10 Incident Containment Methods

4.10 Notes

Incident Containment Methods-4.10

4.11 Incident Response Communications

4.11 Notes

Incident Response Communications-4.11/1

Notification Requirements-4.11/2

Communication Networks-4.11/2

4.12 Incident Eradication and Recovery

4.12 Notes

Incident Eradication and Recovery-4.12/1

Eradication Activities-4.12/2

Recovery-4.12/3

4.13 Post-Incident Review Practices

4.13 Notes

Post-Incident Review Practices-4.13/1

Identifying Causes and Corrective Actions-4.13/2

Documenting Events-4.13/3

Establishing Legal Procedures to Assist in Post-incident Activities-4.13/4

Requirements for Evidence-4.13/5

Legal Aspects of Forensic Evidence-4.13/6

Module 5: Final Remarks (1Lectures)

1 lectures

Final Remarks CISM Certification

Get a shareable digital certificate upon course completion

0 lectures

Career Paths You Can Pursue

Certified Information Security Manager (CISM)

Chief Information Security Officer (CISO)

Information Security Manager

Cybersecurity Program Manager

Instructor

Aman Faheem

CEO CyberEdge Technologies

5Rating

100Reviews

500Students

10Courses

Aman Faheem is a highly qualified with over 15 years multi-domain experience in cybersecurity, law enforcement, and IT leadership—including service in elite intelligence and counterterrorism. He is certified instructor for the CISM, CRISC, and PMP certification courses. He bring both strategic insight and field-proven knowledge to the classroom. He the Founder of Cyber Edge Technologies (Pvt) Ltd., a next-gen cybersecurity firm dedicated to securing digital ecosystems through innovation, training, and resilience.