ISACA Official CISM Certification Boot Camp

Domain 1: Information Security Governance

• Enterprise Governance
• Organizational Culture
• Legal, Regulatory, and Contractual Requirements
• Organizational Structures, Roles, and Responsibilities

• Information Security Strategy
• Information Security Strategy Development
• Information Governance Frameworks and Standards
• IStrategic Planning (e.g., budgets, resources, business case).

Domain 2: Information Security Risk Management

• Information Security Risk Assessment
• Emerging Risk and Threat Landscape
• Vulnerability and Control Deficiency Analysis
• Risk Assessment and Analysis

• Information Security Risk Response
• Risk Treatment / Risk Response Options
• Risk and Control Ownership
• Risk Monitoring and Reporting

Domain 3: Information Security Program

• Information Security Program Development
• Information Security Program Resources (e.g., people, tools, technologies)
• Information Asset Identification and Classification
• Industry Standards and Frameworks for Information Security
• Information Security Policies, Procedures, and Guidelines
• Information Security Program Metrics

• Information Security Program Management
• Information Security Control Design and Selection
• Information Security Control Implementation and Integrations
• Information Security Control Testing and Evaluation
• Information Security Awareness and Training
• Management of External Services (e.g., providers, suppliers, third parties, fourth parties)
• Information Security Program Communications and Reporting

Domain 4: Incident Management

• Incident Management Readiness
• Incident Response Plan
• Business Impact Analysis (BIA)
• Business Continuity Plan (BCP)
• Disaster Recovery Plan (DRP)
• Incident Classification/Categorization
• Incident Management Training, Testing, and Evaluation

• Incident Management Operations
• Incident Management Tools and Techniques
• Incident Investigation and Evaluation
• Incident Containment Methods
• Incident Response Communications (e.g., reporting, notification, escalation)
• Incident Eradication and Recovery
• Post-incident Review Practices

ISACA CISM Certification Exam Review

• Exam Structure
• Exam Registration Process
• Time Management
• Topics and Concepts
• ISACA CISM Certification Question Structure
• Vendor Interpretation Techniques

Please check the course description to find prerequisite information.