Information Security Program Management

Overview

Still managing controls but struggling to run a structured, enterprise-wide security program? Policies alone don’t build resilience. Organizations require professionals able to map strategy into execution and design scalable security programs, manage assets, deploy controls, and evaluate performance across the enterprise. That’s the skill set this course develops. In this Information Security Program Development and Management course, you will: • Translate security strategy into a structured InfoSec program • Define scope, charter, objectives, and business case • Identify and classify critical information assets • Apply industry frameworks and security architecture • Design, implement, & test layered security controls • Build roadmaps, metrics, and continuous monitoring models Unlike theory-only programs, this course delivers a practical, execution-driven approach — from policy to roadmap to measurable results. Designed for aspiring CISM professionals, security managers, program leads, IT auditors, and governance practitioners moving into senior roles. Enroll now and step into strategic security program leadership.

Syllabus

Information Security Program Development

This module focuses on deriving an InfoSec program from your organization's strategy, highlighting the essential elements and trends in InfoSec program management. It also covers key objectives, challenges, and the scope of developing a robust InfoSec program.

Information Asset Identification and Classification

Learn strategies for identifying, classifying, and valuing information assets, as well as understanding their criticality and the impact of potential adverse events. This module explores the foundational principles of asset management within InfoSec.

Industry Standards and Frameworks in InfoSec Programs

Explore the importance of industry standards and frameworks in developing InfoSec programs. This module delves into InfoSec policies, procedures, and the enterprise architecture required for a comprehensive security strategy.

Roadmap and Execution of Information Security Program

Understand how to create and implement a security program roadmap, applying frameworks and architectures to bridge the gap between vision and execution. Learn how to monitor and improve the security program over time through effective metrics and planning.

Information Security Program Management

This module covers the design and selection of security controls, focusing on technical, management, and operational layers. It includes methods for evaluating and integrating these controls into your InfoSec program.

Awareness Training and Operational Alignment

Gain insight into developing an InfoSec awareness training program, and learn how to align it with IT operations for better organizational integration. This module also emphasizes role-based training and cross-organizational responsibilities.

External Services, Relationships, and Program Evaluation

Examine the management of third-party relationships, outsourcing challenges, and how to evaluate InfoSec program performance. This module focuses on compliance monitoring, quality management, and continuous evaluation of security services.