Skip to content
learning path

Certified Information Security Manager (CISM): Part 1 — Foundations

Beginner
Up to 5h 36m
1,478
4.8/5
Enroll
Enhance your skill setDevelop essential skills for thriving in real-world scenarios.
Stay focused, stay committedBoost your learning journey by enrolling: stay focused, consistent and achieve your goals with ease.
Earn a certificate of completionShow your skills and build your credibility when you include them in your resume and LinkedIn profile.

Training content

7
1
COURSE
Intermediate
Duration: 30 minutes and 52 seconds
CISM Foundations: Introduction
This lesson introduces and outlines the CISM (Certified Information Security Management) certification from ISACA.
COURSE
Beginner
Duration: 41 minutes and 43 seconds
CISM Foundations: Module 1
This lesson covers the foundations of information security and prepares students for the CISM (Certified Information Security Manager) exam.
COURSE
Beginner
Duration: 33 minutes and 19 seconds
CISM Foundations: Module 2
This module of CISM Foundations covers risk appetite, risk tolerance, and capacity and explores a range of vital risk management factors and how they affect businesses.
COURSE
Beginner
Duration: 49 minutes and 58 seconds
CISM Foundations: Module 3
This lesson explores risk analysis and prepares you for the CISM examination, which will cover the significant aspects of risk.
COURSE
Beginner
Duration: 46 minutes and 47 seconds
CISM Foundations: Module 4
In this lesson, we will discuss various vitally important metrics used to determine how well we have mitigated risk and matched the requirements of an enterprise.
COURSE
Beginner
Duration: 35 minutes and 15 seconds
CISM Foundations: Module 5
This lesson covers a range of topics relating to information security and highlights the processes, techniques, and standards that can be used to protect your organization.
COURSE
Beginner
Duration: 53 minutes and 30 seconds
CISM Foundations: Module 6
In this lesson, we cover company culture, closing the gap between current state and desired state, how to build security in your environments, as well as cloud security, and performance metrics.
See all

The CISM (Certified Information Security Manager) is one of the most-in demand certifications for information security professionals worldwide. It has been developed and maintained by ISACA at the highest level of quality to meet the ANSI standard 17024 of 2012, a very strict standard that sets a very high bar for the training and certifying of professionals. Shared with the ISO, the 17024 ensures that the CISM is recognized and accepted by the security profession, commercial employers, and government agencies worldwide.

This course lays the foundation for your studies towards the CISM certification, before taking our ‘CISM Domains’ Course (to be released soon!), but even if you’re not interested in taking the exam, you will obtain a comprehensive understanding of information security that will ultimately be useful for you and your organization.

We begin with an introduction to the CISM: background information about the certification, how you will be assessed, how the exams are structured and carried out, the requirements of the exam, and recommendations for passing. We then move on to look at security topics themselves.

This course covers risk appetite, tolerance, and capacity, cost considerations for managing risk, risk analysis and risk management frameworks, controlling and monitoring security threats, and risk management strategies and metrics.

We'll also take a look at business continuity and disaster recovery method and strategies and look at how we can test their efficacy within an organization. You'll learn about cybersecurity and how to keep your cloud infrastructure safe.

After completing this course, you’ll have a solid grounding in the subject of information security and will be ready to move on to the CISM Domains to learn about the specific topics within the assessment criteria for the CISM Certification. You can find out CISM Domains course here. If you have any feedback relating to this course, feel free to tell us about it at support@cloudacademy.com.

Learning Objectives

  • Understand the CISM certification: the structure, requirements, and tips for passing
  • Understand how to analyze risk, control and measure it, and put controls in place to minimize it
  • Learn about business continuity and disaster recovery planning and how to test it
  • Learn about cybersecurity and cloud security
  • Gain a solid understanding of the various security frameworks that exist
  • Learn how to build security into your infrastructure and create a security-aware culture in your organization

Intended Audience 

This course is intended for those looking to take the CISM (Certified Information Security Manager) exam or anyone who wants to improve their understanding of information security.

Prerequisites

Any experience relating to information security would be advantageous, but not essential. All topics discussed are thoroughly explained and presented in a way allowing the information to be absorbed by everyone, regardless of experience within the security field.

Your certificate for this learning path

About the Author

Avatar
Ross Leo, opens in a new tab
Instructor
Students
12,219
Courses
76
Learning paths
24

Mr. Leo has been in Information System for 38 years, and an Information Security professional for over 36 years.  He has worked internationally as a Systems Analyst/Engineer, and as a Security and Privacy Consultant.  His past employers include IBM, St. Luke’s Episcopal Hospital, Computer Sciences Corporation, and Rockwell International.  A NASA contractor for 22 years, from 1998 to 2002 he was Director of Security Engineering and Chief Security Architect for Mission Control at the Johnson Space Center.  From 2002 to 2006 Mr. Leo was the Director of Information Systems, and Chief Information Security Officer for the Managed Care Division of the University of Texas Medical Branch in Galveston, Texas.

 

Upon attaining his CISSP license in 1997, Mr. Leo joined ISC2 (a professional role) as Chairman of the Curriculum Development Committee, and served in this role until 2004.   During this time, he formulated and directed the effort that produced what became and remains the standard curriculum used to train CISSP candidates worldwide.  He has maintained his professional standards as a professional educator and has since trained and certified nearly 8500 CISSP candidates since 1998, and nearly 2500 in HIPAA compliance certification since 2004.  Mr. leo is an ISC2 Certified Instructor.

Covered Topics

Security Governance
Risk Management
Cyber Security
Analytics
Security