CISM 3-Day Certification Exam Prep Training

Information Security (IS) Governance

• Identifying Assets
• Assessing Risk and Vulnerabilities
• Managing Assets

Information Risk Management

• Clarifying Assets and Establishing Ownership
• Structuring the Information Risk Assessment Process
• Assessing Business Impacts
• Managing Change

Developing an IS Program

• IS Strategy
• Aligning Other Programs for Assurance Functions
• Developing IS Architectures
• Security Awareness, Training and Education
• Communication and Maintaining Standards, Procedures and Other Documents
• Controlling Change
• Lifecycle Activities and Security Metrics

IS Program Management

• Fundamentals of Planning and Managing a Security Program
• Security Baselines and Business Processes
• Security Program Infrastructure
• Lifecycle Policies
• Security Impact on Users and Accountability
• Security Metrics
• Resource Management

Incident Management and Response

• Fundamentals and Importance of Response Management
• Business Impact Analysis
• Response and Recovery Plan Development
• Incident Response Process
• Response and Recovery Plan Implementation
• Documenting Responses
• Post-Event Procedures

• Number of Questions: 200
• Passing Score: 450 passing on the scale of 200-800.
• Test Duration: 4 Hours
• Test Format: Written Examination
• Test Delivery: ISACA (This exam is only being delivered three times a year)

CISM Certification measures following Skills:

• Access Control Systems & Methodology
• Applications & Systems Development
• Business Continuity & Disaster Recovery Planning
• Cryptography
• Law, Investigation & Ethics
• Operations Security (Computer)
• Physical Security
• Security Architecture & Models
• Security Management Practices
• Telecommunications & Network Security

Pricing for the CISM Certification Exam differs dependant on your member status, method of registration, and timing of exam registration. Learn more about pricing on the ISACA Exam Registration page.