Certified Information Systems Security Manager (CISSM)
Exam Code: CISSM-001
The Certification is a unique credential in information security as it is designed specifically for individuals who have experience managing an information security program.
The certification is designed for professionals responsible for establishing, managing, and governing enterprise-wide information security programs. It focuses on aligning security initiatives with business objectives, ensuring effective risk management, and implementing robust governance frameworks. CISSM emphasizes a managerial and strategic perspective, enabling candidates to design security policies, oversee security operations, and ensure compliance with legal, regulatory, and industry standards.
Certified Information Systems Security Manager (CISSM)® is unique in the information security credential marketplace because it is designed specifically and exclusively for individuals who have experience managing an information security program. The certification has been renowned as the globally recognized achievement for those who have experience managing an information security program.
Benefits
- There are many reasons to achieve this certification:
- Worldwide recognition as an information security manager
- Understand how to govern information security
- Understand how to develop & manage an information security program
- Understand how to manage incidents
- Gain a better understanding of information risk management.
- Provides the information security professional with an opportunity to build upon existing credentials and provides tangible evidence of career growth.
- Recognition of attainment of advanced job skills as required for an information security professional.
- Provides access to valuable resources, such as peer networking and idea exchange
Course Duration: 30 to 35 Hours
Module 1 – Information Security Governance
- Principles of information security governance
- Alignment of security strategy with business objectives
- Roles and responsibilities of security management
- Security policies, standards, and procedures
- Legal, regulatory, and compliance requirements
Module 2 – Risk Management
- Risk management frameworks and methodologies
- Risk identification, assessment, and analysis
- Qualitative vs quantitative risk analysis
- Risk treatment options (mitigate, transfer, accept, avoid)
- Risk appetite and tolerance
Module 3 – Information Security Program Development
- Building an information security program
- Security program lifecycle
- Budgeting and resource planning
- Metrics and key performance indicators (KPIs)
- Continuous improvement of security programs
Module 4 – Asset Management and Data Classification
- Information asset identification
- Data classification models
- Data ownership and custodianship
- Information lifecycle management
- Data handling and retention requirements
Module 5 – Security Architecture and Controls
- Information asset identification
- Data classification models
- Data ownership and custodianship
- Information lifecycle management
- Data handling and retention requirements
Module 5 – Security Architecture and Controls
- Security architecture concepts
- Defense-in-depth strategy
- Administrative, technical, and physical controls
- Network, application, and endpoint security
- Cloud and virtualization security fundamentals
Module 6 – Identity and Access Management (IAM)
- Authentication and authorization models
- Role-based and attribute-based access control
- Privileged access management (PAM)
- Identity lifecycle management
- Single sign-on (SSO) and federation
Module 7 – Security Operations and Incident Management
- Security monitoring and logging
- Incident response lifecycle
- Threat detection and analysis
- Digital forensics fundamentals
- Security operations center (SOC) function
Module 8 – Business Continuity and Disaster Recovery
- Business impact analysis (BIA)
- Business continuity planning (BCP)
- Disaster recovery strategies
- Backup and recovery mechanisms
- Crisis management and communication
Module 9 – Vendor, Third-Party, and Cloud Risk Management
- Third-party risk assessment
- Contractual and SLA security requirements
- Cloud shared responsibility model
- Supply chain security risks
- Ongoing vendor monitoring
Module 10 – Security Compliance, Audit, and Assurance
- Security audits and assessments
- Compliance frameworks
- Internal and external audit coordination
- Security reporting to management
- Continuous compliance monitoring
Target Audience
- CEO / CFO / CIO / CTO / CISO
- IS / IT Specialist / Analyst / Manager
- IS / IT Auditor / Consultant
- IS / IT Head / Director
- IT Operations Manager / Head / Director
- IT Compliance Manager / Head / Director
- Security Head / Director
- Security Specialist / Analyst
- Security Manager / Architect
- Security Consultant / Professional
- Security Officer / Engineer
- Security Administrator
- Security Auditor
- Network Specialist / Analyst
- Network Manager / Architect
- Network Consultant / Professional
- Network Administrator
- Senior Systems Engineer
- Systems Analyst
- Systems Administrator
