Cours : CISM Certified Information Security Manager CBK («CIK»)

Certification professionnelle

The intent of this training as well as certification is to provide a common body of knowledge for information security management. The CISM focuses on information risk management as the basis of information security. It also includes material on broader issues such as how to govern information security as well as on practical issues such as developing and managing an information security program and managing incidents.
We consider at Digicomp this training to be a real alternative to ISO 27001 Lead Auditor, specifically because it goes beyond auditing and focuses on the "best practices" management of IS.

CISM Exam Information
The CISM exam can only be taken on two occassions and one place in Switzerland (Zürich) during the year.
9 June 2012 exam registration key dates:
Early Registration Deadline:  8 February 2012
Final Registration Deadline:  4 April 2012
Exam: 9 June 2012

1. Information Security Governance
   Develop information security strategy to align with business strategy and direction
   Establish reporting and communication channels regarding information security governance activities
   
2. Risk Management Process
   Develop a systematic, analytical, and continuous risk management process
   Understand and implement risk identification, analysis, and mitigation activities from the CISM training course
   Define and prioritize risk mitigation strategies
   Appropriately report changes in risk to the correct levels of management on a periodic and event-driven basis
   
3. Information Security Governance
   Create and maintain plans for implementing a carefully designed information security governance framework
   Develop information security baselines from organizational needs, as well as international standards
   Ensure security is effectively incorporated into the organizations established change management processes at CISM training course
   Effectively integrate information security policies, guidelines, procedures, and accountability into the organization’s culture
   
4. Managing risks
   Manage security risk from contracts; transfer risk with contracts
   Understand information security compliance issues resulting from Sarbanes-Oxley
   
5. Strategic alignment
   Properly align IT strategic planning with organizational strategic planning
   Control risk within software development or acquisition projects
   
6. Financial Aspects
   How to position information security management within the organization
   Control IT security risk relating to IT funding
   
7. Organizational and enterprise culture issues
   Manage risk associated with social engineering, physical infrastructure threats, malicious code, and software vulnerabilities at CISM course
   
8. Business Continuity Planning and Resilience
   Integrating Information Security into Business Continuity, Disaster Recovery, and Incident Response
   Organize, train, and properly equip response teams