ISACA CISM – Certified Information Security Manager

Security teams often have strong technical skills but inconsistent approaches to governance, risk, controls, incident response, and BC/DR planning. IT Directors can assign this CISM-aligned course to standardize how experienced security practitioners think about building and managing an information security program.

The course is best suited for security managers, Team Leads, risk-focused IT Practitioners, and senior staff preparing for the ISACA CISM certification. The ordered curriculum represents about 14 hours of instruction per learner, making it a realistic multi-week assignment alongside operational work. For change management, Training Managers can sequence modules around program governance first, then risk management, security operations, controls, incident response, and continuity planning.

CBT Nuggets Playlists can help structure the rollout by role, Practice Exams can support certification readiness, and Team Reporting gives IT leaders visibility into completion progress across the team.

IT teams complete this training to connect security management practices with day-to-day operational decisions. The course topics map to real program work: creating an IS program, allocating resources, using metrics, managing assets and threats, implementing controls, responding to incidents, and planning for business continuity and disaster recovery.

• Improve governance consistency by aligning security program creation, roles, resources, and metrics.
• Reduce operational risk by giving teams a shared process for risk management frameworks, asset management, threat analysis, and security controls.
• Strengthen incident readiness by reviewing the incident response process before a real outage or breach scenario occurs.
• Support audit and resilience goals with structured coverage of information security operations, BC/DR planning, and standards.

Knowledge

• How information security programs are created, resourced, and managed.
• How organizational roles and security metrics support program oversight.
• Core risk management concepts, frameworks, and processes.
• How assets, threats, controls, and operations fit into security program management.
• How incident response and BC/DR planning contribute to organizational resilience.

Ability

• Evaluate whether an IS program has the roles, resources, and metrics needed for effective management.
• Apply risk management thinking to assets, threats, controls, and security operations.
• Support implementation and management of security controls within a broader program.
• Participate more effectively in incident response planning and execution.
• Contribute to continuity and disaster recovery planning discussions with a CISM-aligned management perspective.