Building and Managing Effective Security Programs

Packt via Coursera

Go to class Write review

Overview

Google, IBM & Meta Certificates – 40% Off

One Coursera Plus subscription covers most Professional Certificates on Coursera.

Unlock All Certificates

Master the skills needed to design, implement, and manage comprehensive security programs within organizations. Explore human factors, secure development, cryptography, cloud security, and third-party risk management. This course delves into the practical aspects of building and maintaining security programs, focusing on personnel security, secure software development, identity and access management, and cryptographic controls. Learners will also examine cloud security fundamentals, supply chain management, and physical security measures. The course concludes with guidance on documenting security programs and measuring their effectiveness. By completing this course, you will be prepared to lead security initiatives and ensure the resilience of your organization's information assets. The course uses a structured, scenario-driven approach, combining clear explanations with real-world examples to illustrate best practices in security program management. Progressively organized modules help learners connect foundational knowledge to advanced security program strategies. This course is part two of a three-course Specialization designed to build a complete and cohesive understanding of the subject. While it offers valuable skills on its own, you'll gain the most benefit by progressing through all three courses as a structured learning journey. This course is based on CISM Certification Complete Course - All Domains 2026, by GRC Gate. This video is licensed and distributed by Packt. All rights reserved. Packt is one of the world's most prolific publishers of cutting-edge technical content. For over two decades we've made it our mission to curate and publish the knowledge of only the very best technical experts. We focus on real-world courses that help our customers get the job done, with coverage that extends across a wide range of established and cutting-edge technical topics. If you're an individual or an organisation that embraces learning by doing, Packt is the perfect fit for you.

Syllabus

Program Foundation and Human Factors (CISM Domain 3: Part 1)
- This module covers the foundational elements of building a security program, including defining its scope, aligning it with organizational goals, and addressing human and technical factors that impact security. Learners will gain insight into enterprise architecture, social engineering prevention, and personnel security measures.
Secure Development (CISM Domain 3: Part 2)
- This module explores secure software development practices, focusing on integrating security into DevOps and DevSecOps workflows, understanding the software testing lifecycle, and applying threat modeling techniques. Learners will gain insights into best practices for security testing and how to maintain security throughout the software development lifecycle.
Identity Access Management (CISM Domain 3: Part 3)
- This module explores the core principles of identity and access management, including the AAA framework, key IAM concepts, and best practices for multi-factor and biometric authentication. Learners will gain a deep understanding of how to implement secure identity verification and access control mechanisms. The module also covers real-world applications and threat mitigation strategies.
Cryptography (CISM Domain 3: Part 4)
- This module introduces the fundamental concepts of cryptography, including symmetric and asymmetric encryption, digital signatures, and public key infrastructure. It explores how these cryptographic tools are used to secure information and digital communications. Learners will gain practical knowledge of key management and real-world applications of cryptographic systems.
Cloud Security (CISM Domain 3: Part 5)
- This module covers the key aspects of cloud security, including cloud computing fundamentals, deployment and service models, shared responsibility frameworks, and the importance of contractual agreements and SLAs. Learners will gain a deep understanding of how to assess and manage security risks in cloud environments.
Third-Party, Supply Chain, and Physical Security (CISM Domain 3: Part 6)
- This module covers key aspects of third-party risk management, including SSAE, SOC audits, outsourcing best practices, supply chain security, and physical and environmental controls for IT environments. Learners will gain an understanding of how to assess and mitigate risks associated with external vendors and infrastructure security.
Program Documentation, Metrics, and Conclusion (CISM Domain 3: Part 7)
- This module covers essential topics in program documentation, security metrics, and effective record-keeping practices. Learners will gain insights into data security, performance monitoring, and compliance strategies. It also provides a structured approach to documenting and maintaining information security programs.