The Pearson Complete Course for CISM Certification: Unit 3

Overview

This course is designed for professionals aiming to excel in creating and managing robust security programs that align with organizational goals. You'll start by exploring the essential components of an information security program, including frameworks, benchmarks, and metrics. As you progress, you'll gain expertise in asset classification, controls, configuration management, and vulnerability management. The course also covers the software development life cycle, cloud computing, and vendor management, equipping you with the skills to handle complex security challenges. Dive into the technical aspects of secure design and implementation, mastering secure design principles, network access control, cryptography, and physical security.

Syllabus

The Pearson Complete Course for CISM Certification: Unit 3

This course delves into the information security program development and management domain, covering the essential activities required to create, implement, and manage an enterprise information security program effectively. It begins with an exploration of program components, frameworks, benchmarks, metrics, and training. The course then examines critical elements such as asset classification, controls, configuration and change management, patch and vulnerability management, and the software development life cycle. Additionally, it addresses cloud computing, vendor management, and the technical aspects of secure design, including design principles, network access control, cryptography, and physical security. With three lessons and 26 sub-lessons aligned with ISACA's objectives, the course includes interactive challenges and case studies to enhance learning. Each lesson concludes with a quiz, emphasizing the role of an information security program manager in developing best practices and aligning security programs with organizational goals.