CISM Training Boot Camp

Infosec’s Certified Information Security Manager (CISM) Boot Camp is a five-day training focused on preparing you for the ISACA CISM exam. You’ll leave with the knowledge and domain expertise needed to pass the CISM exam the first time you take it.

Earn your CISM, guaranteed

Boot camp overview

This CISM Boot Camp is designed for experienced information security managers and other professionals who manage, design, oversee or assess an enterprise’s information security.

The training prepares you for the CISM examination by testing your knowledge and your ability to apply it to real-world scenarios. You will gain in-depth knowledge of security governance, risk management, security program development and management, and security incident management. The boot camp has been updated to align with the new CISM job practice areas and is designed to fully prepare you to pass the challenging CISM exam.

What's included?

93% pass rate — the best in the industry

• Five days of intense CISM training with a CISM-certified instructor
• Immediate access to in-depth CISM pre-study course
• Infosec proprietary digital courseware (physical textbooks available to purchase)
• ISACA review manual
• CISM exam voucher
• 90-day access to replays of daily lessons (Flex Pro)
• Curated videos from other top-rated instructors (Flex Pro)
• 100% Satisfaction Guarantee
• Exam Pass Guarantee (Flex Pro)

Industry-leading exam pass rates

Infosec’s CISM courseware materials are always up to date and synchronized with the latest ISACA exam objectives. Our industry-leading curriculum and expert instructors have led to the highest pass rates in the industry. More than 93% of Infosec students pass their certification exams on their first attempt.

Who should attend?

• Information security managers
• Information security consultants
• Chief information officers
• Chief information security officers
• Anyone interested in learning information security management skills and getting certified

Prerequisites

To become a CISM, you must submit verified evidence of a minimum of five years of information security work experience, with a minimum of three years of information security management work experience in three or more of the job practice analysis areas. The work experience must be gained within the ten-year period preceding the application date for certification or within five years from the date of originally passing the exam.

CISM objectives

The CISM certification promotes international practices and validates your knowledge and experience around effective security management and consulting. The four CISM domains include:

1. Security governance: To effectively address the challenges of protecting an organization’s assets, senior management must define the desired outcomes of the information security program.
2. Risk management: Asset classification and valuation is an essential part of an effective risk management program — the greater the value, the greater the impact, the greater the risk.
3. Information security program development and management: The purpose of this area is to implement management’s governance strategy — the “due diligence” and “due care” of protecting the corporation’s assets.
4. Information security incident management: This area focuses on effectively managing unexpected (and expected) events, which may or may not be disruptive, and can be summed up in five words: identify, protect, detect, respond and recover.

What you'll learn

• Information security governance
• The role of an information security steering group
• Legal and regulatory issues associated with internet businesses, global transmissions and transborder data flows
• Common insurance policies and imposed conditions
• Information security process improvement
• Recovery time objectives (RTO) for information resources
• Cost-benefit analysis techniques for mitigating risks to acceptable levels
• Security metrics design, development and implementation
• Information security management due diligence activities and reviews of the infrastructure
• Events affecting security baselines that may require risk reassessments
• Changes to information security requirements in security plans, test plans and reperformance
• Disaster recovery testing for infrastructure and critical business applications
• External vulnerability reporting sources
• CISM information classification methods
• Life-cycle-based risk management principles and practices
• Security baselines and configuration management in the design and management of business applications and infrastructure
• Acquisition management methods and techniques
• Evaluation of vendor service level agreements and preparation of contracts

Can’t get away for a week?
Learn CISM on-demand

Get the cybersecurity training you need at a pace that fits your schedule with a subscription to Infosec Skills. Includes unlimited access to hundreds of additional on-demand courses — plus cloud-hosted cyber ranges where you can practice and apply knowledge in real-world scenarios — all for just $34 a month!