CISM 2013: Information Security Program Development and Management (Part 4)

Course details

Information security programs typically have numerous operational responsibilities and provide a variety of security services. While programs vary from organization to organization, there are operations and services that are typically found in all well conceived security programs. This course examines the activities and responsibilities of an information security manager related to operations and services within an organization. The course will examine different organizational units such as IT, HR, and Legal that are affected by security programs, and how their needs are integrated into the program. This course also examines how audits and compliance enforcement are performed. Finally, this course examines how technology - both legacy and new technologies such as cloud computing - are managed in modern security programs. This course prepares you for the Certified Information Security Manager (CISM) exam.

• match information organizational roles to their corresponding responsibilities
• determine the responsibilities of individuals within an organization related to standard security program components
• sequence the steps of a security review, given a scenario
• identify key points regarding audits that an information security manager should remember during program implementation
• identify preventive measures that minimize security risk
• identify the responsibilities of an information security manager with relation to compliance monitoring and enforcement
• recognize the results of commonly used risk analysis methods
• recognize the responsibilities of an information security manager related to monitoring and compliance
• identify activities that allow an information security manager to integrate a security program within an organization
• recognize strategies for managing risk of outsourcing when using third-party service providers
• recognize examples of cloud computing models
• recognize the responsibilities of an information security manager related to process integration and outsourcing