CISM Certification Course

CISM Certification Training Course

Certified Information Security Manager (CISM) Training in Pune | Information Security Management Certification

Become a Certified Information Security Manager (CISM) that is widely recognised as an affirmation of your ability to assess risks, implement effective governance, and proactively respond to risk factors. The CISM Certification Training by IEVISION will help you in your journey.

Our instructor-led CISM certification program is aligned with the latest ISACA CISM Job Practice Domains and prepares professionals for senior management roles in cybersecurity and GRC (Governance, Risk & Compliance).

Why CISM Certification?

CISM focuses on assessing risks and implementing governance in an organisation. Organizations prefer CISM-certified professionals for decision-making, compliance oversight, and security leadership with a focus on modern technologies like AI and Blockchain.

Top Job Roles After CISM

• Information Security Manager

• Cybersecurity Program Manager

• GRC Manager

• IT Risk Manager

• Security Consultant

• Compliance Manager

• Security Governance Lead

• Chief Information Security Officer (CISO)

Skills You Will Gain after CISM Certification

• Design enterprise security strategy

• Align security with business goals

• Manage cyber risks & compliance

• Build and run security programs

• Lead risk response teams

• Implement governance frameworks

• Manage third-party & vendor security

CISM Course Outline (4 Domains)

The CISM exam consists of 150 questions, which cover 4 job practice domains. All of them test your knowledge and ability in a real-life job practice.

Domain 1 – Information Security Governance (17%)

Domain 1 of the CISM certification will provide you with a deep insight into the culture, regulations, and structure of the modern enterprise. In this domain, you will know how to analyse, plan, and develop information security strategies.

A–Enterprise Governance

1. Organizational Culture

2. Legal, Regulatory and Contractual Requirements
3. Organizational Structures, Roles, and Responsibilities

B–Information Security Strategy

1. Information Security Strategy Development

2. Information Governance Frameworks and Standards

3. Strategic Planning (e.g., Budgets, Resources, Business Case)

Domain 2 – Information Security Risk Management (20%)

In Domain 2 of the CISM certification course, you will learn to identify potential information security risks, threats, and vulnerabilities. Additionally, you will also learn to counter such risks at the management level.

A–Information Security Risk Assessment

1. Emerging Risk and Threat Landscape

2. Vulnerability and Control Deficiency Analysis

3. Risk Assessment and Analysis

B–Information Security Risk Response

1. Risk Treatment / Risk Response Options

2. Risk and Control Ownership

3. Risk Monitoring and Reporting

Domain 3 – Information Security Program (33%)

Under this domain of the CISM certification course, you will learn about resources and assets for information security management.

A–Information Security Program Development

1. Information Security Program Resources (e.g., People, Tools, Technologies)

2. Information Asset Identification and Classification

3. Industry Standards and Frameworks for Information Security

4. Information Security Policies, Procedures, and Guidelines

5. Information Security Program Metrics

B–Information Security Program Management

1. Information Security Control Design and Selection

2. Information Security Control Implementation and Integrations

3. Information Security Control Testing and Evaluation

4. Information Security Awareness and Training

5. Management of External Services (e.g., Providers, Suppliers, Third Parties, Fourth Parties)

6. Information Security Program Communications and Reporting

Domain 4 – Incident Management

In this domain of the CISM certification course, you will get trained in risk management and preparedness. You will also learn to prepare a business to respond to incidents and guide them through the recovery process.

A–Incident Management Readiness

1. Incident Response Plan

2. Business Impact Analysis (BIA)

3. Business Continuity Plan (BCP)

4. Disaster Recovery Plan (DRP)

5. Incident Classification/Categorization

6. Incident Management Training, Testing, and Evaluation

B–Incident Management Operations

1. Incident Management Tools and Techniques

2. Incident Investigation and Evaluation

3. Incident Containment Methods

4. Incident Response Communications (e.g., Reporting, Notification, Escalation)

5. Incident Eradication and Recovery

6. Post-Incident Review Practices