# CISM > Edoxi's 30-hour online CISM course will prepare you for the ISACA CISM exam. Enrol and gain risk assessment, governance, compliance and incident response skills ## Course Details - Rating: 4.9/5 (200 reviews) - Category: Cyber Security - Sub-Category: Security Governance ## Course Introduction Edoxi’s 30-hour Online Certified Information Security Manager (CISM) Course prepares you for ISACA’s CISM certification. The course aligns with official ISACA courseware. Learn to manage enterprise security, align security strategies with business goals, and respond to threats. It covers four domains: Information Security Governance, Risk Management, Security Program Development, and Incident Management. Analyse real-world security scenarios, work on risk management case studies, and engage in mock compliance audits. Gain experience with frameworks such as FAIR and OCTAVE. Prepare for job roles like Information Security Manager or CISO. Enrol now to kick-start your career in Information Security. ## Course Overview - Delivery Modes: Online - Course Duration: 30 Hours - Corporate Days: 5 Days - Learners Enrolled: 50+ - Modules: 4 ## Key Features of Edoxi's Online CISM Course **Information Risk Management Exercises** Practice hands-on risk assessment and analysis through structured lab exercises on enterprise security scenarios. **Official Study Resources** Get access to ISACA's official courseware, supplemented with comprehensive mock exams and detailed case studies. **Interactive Security Scenarios** Engage in discussions and analysis of real-world security situations, with an emphasis on risk management and incident handling. **Master Security Program Development** Design and present a comprehensive security strategy aligned with business objectives through guided practical exercises. **Learn Risk Assessment Strategies** Conduct a detailed organisational risk analysis and develop practical mitigation strategies through hands-on projects. **Governance Framework Exercise** Build an IT governance framework for enterprise environments through practical case studies and implementation exercises. ## Who Can Join Our CISM Certification Course? **Information Security Professionals** IT security practitioners looking to advance in security management. **IT Managers and System Administrators** suitable for technical leaders managing IT infrastructure and security systems. **Risk Management Specialists** Tech professionals and individuals aspiring to work in risk assessment and compliance **Cybersecurity Analysts** Security analysts looking to progress into management roles in incident response and proactive threat management. **Compliance and Governance Professionals** Specialists working with regulatory requirements and governance frameworks. **IT Auditors and Consultants** Tech professionals involved in security assessments and auditing. ## CISM Course Modules ### Module 1: Information Security Governance ( Domain 1) **Chapter 1.1: Enterprise Governance** - Lesson 1.1.1: Organizational Culture - Lesson 1.1.2: Legal, Regulatory, and Contractual Requirements - Lesson 1.1.3: Organisational Structures, Roles, and Responsibilities **Chapter 1.2: Information Security Strategy** - Lesson 1.2.1: Information Security Strategy Development - Lesson 1.2.2: Information Governance Frameworks and Standards - Lesson 1.2.3: Strategic Planning (e.g., Budgets, Resources, Business Case) ### Module 2: Information Security Risk Management (Domain 2) **Chapter 2.1: Information Security Risk Assessment** - Lesson 2.1.1: Emerging Risk and Threat Landscape - Lesson 2.1.2: Vulnerability and Control Deficiency Analysis - Lesson 2.1.3: Risk Assessment and Analysis **Chapter 2.2: Information Security Risk Response** - Lesson 2.2.1: Risk Treatment / Risk Response Options - Lesson 2.2.2: Risk and Control Ownership - Lesson 2.2.3: Risk Monitoring and Reporting ### Module 3: Information Security Program (Domain 3) **Chapter 3.1: Information Security Program Development** - Lesson 3.1.1: Information Security Program Resources (e.g., People, Tools, Technologies) - Lesson 3.1.2: Information Asset Identification and Classification - Lesson 3.1.3: Industry Standards and Frameworks for Information Security - Lesson 3.1.4: Information Security Policies, Procedures, and Guidelines - Lesson 3.1.5: Information Security Program Metrics **Chapter 3.2: Information Security Program Management** - Lesson 3.2.1: Information Security Control Design and Selection - Lesson 3.2.2: Information Security Control Implementation and Integrations - Lesson 3.2.3: Information Security Control Testing and Evaluation - Lesson 3.2.4: Information Security Awareness and Training - Lesson 3.2.5: Management of External Services (e.g., Providers, Suppliers, Third Parties, Fourth Parties) - Lesson 3.2.6: Information Security Program Communications and Reporting ### Module 4: Incident Management (Domain 4) **Chapter 4.1: Incident Management Readiness** - Lesson 4.1.1: Incident Response Plan - Lesson 4.1.2: Business Impact Analysis (BIA) - Lesson 4.1.3: Business Continuity Plan (BCP) - Lesson 4.1.4: Disaster Recovery Plan (DRP) - Lesson 4.1.5: Incident Classification/Categorization - Lesson 4.1.6: Incident Management Training, Testing, and Evaluation **Chapter 4.2: Incident Management Operations** - Lesson 4.2.1: Incident Management Tools and Techniques - Lesson 4.2.2: Incident Investigation and Evaluation - Lesson 4.2.3: Incident Containment Methods - Lesson 4.2.4: Incident Response Communications (e.g., Reporting, Notification, Escalation) - Lesson 4.2.5: Incident Eradication and Recovery - Lesson 4.2.6: Post-Incident Review Practices ## Hands-On Lab Activities **Security Program Development** Develop a comprehensive security strategy that demonstrates alignment with business objectives, providing practical experience in security program planning. **Risk Assessment** Conduct a detailed organisational risk analysis and create practical mitigation strategies based on findings. **Incident Response Case Study** Analyse actual breach scenarios and develop effective response plans, gaining practical experience in incident management. **Governance Framework Design** Participate in creating and presenting an IT governance framework for an enterprise environment, offering hands-on experience in framework development. ## CISM Course Outcome and Career Opportunities The CISM certification provides a robust pathway to leadership roles in information security management across the dynamic cybersecurity sector. The CISM Certification is particularly valued for professionals aiming to advance into strategic security positions. After completing our online CISM Classes, learner will; - Gain a deep understanding of information security management principles - Develop skills for overseeing information security teams and initiatives. - Learn about information security frameworks, policies, and best practices. - Improve your decision-making skills in the context of security management - Position yourself for career growth in the field of information security. - Unlock job roles such as security manager, consultant, or director. - Get an opportunity to join the global community of information security professionals. - Prepare effectively for the ISACA CISM certification exam. ## CISM Training Options **Live Online Training** - 30-hour online CISM Training - Flexible scheduling options - Interactive case study discussions - Real-time instructor support - Access to mock exams and courseware **Corporate Training** - 5-day intensive program - Global Fly-Me-A-Trainer service - Complete training logistics management - Flexible venue options (Hotel/Client premises/Edoxi) - Comprehensive support (Training materials/Food & refreshments/Technical setup) ## How to get your CISM Certification? Here’s a four-step guide to becoming a certified CISM professional. 1. Enrol in Edoxi’s Online CISM Certification Training 2. Complete our CISM training covering 4 key domains 3. Apply and ace the ISACA CISM Certification exam 4. Receive ISACA's prestigious CISM certification ## Why Choose Edoxi for CISM Training? Here are a few reasons why you should choose Edoxi for Online CISM training; **A professional learning environment** We maintain small batch sizes to ensure individualised attention and a thorough understanding of security management. This allows for intensive hands-on practice and detailed discussions on complex security scenarios. **Industry-Aligned Curriculum** We follow ISACA’s official curriculum, integrating real-world case studies and practical labs in risk management and incident response. This ensures hands-on experience with enterprise security challenges. **Comprehensive Practical Training** Engage in risk assessment projects, security program development, and governance framework workshops. These activities reinforce theory through real-world implementation. **Strategic Skills Focus** You get to develop technical proficiency and strategic decision-making for security management roles. Our mock assessments and compliance audits enhance participants' ability to make informed decisions. **Complete Learning Support** We provide official courseware, mock exams, and detailed case studies. This structured approach ensures thorough exam preparation and practical security management skills. ## Frequently Asked Questions **Q: What prerequisites do I need for the CISM certification?** A: While there are no prerequisites to take the exam, you need 5 years of information security work experience to obtain the CISM certification. A basic understanding of IT security concepts is beneficial when attending the CISM (Certified Information Security Manager) course. **Q: What career growth can I expect with a CISM certification?** A: CISM certification opens paths from entry-level positions like Security Analyst to senior roles like CISO, particularly in today’s growing cybersecurity sector. **Q: What is the average salary of a Certified Information Security Manager (CISM)?** A: The average salary of a CISM professional is around $138k per year. However, work experience, location and company size and type influence the average pay scale of a CISM Professional. **Q: What is the salary of a Certified Information Security Manager (CISM)?** A: A Certified Information Security Manager (CISM) can expect to earn an average salary between $136,000 and $170,000 per year. However, salaries can vary widely depending upon factors like experience, location, and industry. **Q: What are the prerequisites required to join Edoxi’s Online CISM training?** A: To join Edoxi’s CISM Classes, a basic understanding of information security concepts and IT governance principles is recommended.  ## What Do You Learn from the CISM Course? **Enterprise Information Security Governance** Master the principles of aligning security strategies with organisational objectives, ensuring compliance with regulatory requirements and industry standards. **Strategic Risk Management Framework** Develop expertise in identifying, analysing, and mitigating information security risks using methodologies like FAIR and OCTAVE to support business resilience. **Security Program Development** Learn to design and implement comprehensive security programs, including policy development, resource allocation, and integration with business processes. **Incident Response Leadership** Acquire advanced skills in developing incident response strategies, from classification to containment, ensuring minimal business disruption during security events. **Security Controls Implementation** Gain proficiency in selecting, implementing, and evaluating security controls across enterprise environments using industry-standard frameworks like COBIT and ISO 27001. **Business Continuity Planning** Master the development of business continuity and disaster recovery plans, ensuring organisational resilience through effective risk mitigation strategies. ## Job Roles to Pursue After CISM Course Information Security Analyst, Security Compliance Associate, Cybersecurity Analyst, IT Security Manager, Risk Management Specialist, Cybersecurity Consultant, Information Security Architect, Chief Information Security Officer (CISO), Senior Security Consultant, Director of Information Security ## About This Course ## About Our Online CISM Course The CISM (Certified Information Security Manager) certification from ISACA is a globally recognised credential designed for professionals in information security management. The CISM certification provides you with the essential skills needed to assess risks, implement effective governance, and respond proactively to incidents. Edoxi's 30-hour Online CISM certification course prepares information security professionals for leadership roles in enterprise cybersecurity. Our CISM training aligns with ISACA’s globally recognised standards and emphasises key areas such as security governance, risk management, program development, and incident management. Edoxi’s Online CISM course includes real-world simulations and case studies, enabling you to master critical security management skills. Our hands-on training incorporates tools like FAIR and OCTAVE for risk assessment, along with governance frameworks such as COBIT and ISO. These tools ensure that participants gain practical competency in enterprise security management. Edoxi’s Online Certified Information Security Manager (CISM) training is tailored for professionals in sectors such as finance, oil and gas, healthcare, and government, where strong security management skills are essential. The Online CISM course curriculum prepares you for senior roles, including Information Security Manager and Chief Information Security Officer (CISO). Our training focuses on aligning security strategies with business objectives while ensuring compliance with regulatory standards across various industries. CISM Exam Details And Format The following table showcases the details of the CISM exam Exam Criteria Details Exam Name Certified Information Security Manager (CISM) Duration 4 hours Number of Questions 150 multiple-choice questions Passing Score 450 out of 800 Fees 575 USD (ISACA members), 760 USD (non-members), 50 USD application fee Certification Validity 3 Years Recertification 20 CPE hours annually (120 CPE hours over 3 years) Exam Administration ISACA, through PSI testing centres or remote proctoring Read More ## Trainer - Name: Maria Mehwish - Designation: Leading Cybersecurity & Cloud Security Trainer Maria Mehwish is a forward-thinking and knowledgeable information security leader with a strong background in building, updating, and maintaining digital protections for various organisations. As a certified CEH, CCSP, CCT, and CISSP Trainer, Maria has a proven track record of delivering innovative and immersive coursework, enhancing learning experiences for cyber threats, ethical hacking, security policy, DevSecOps, and cloud security. With excellent verbal and written communication skills, she is also adept at troubleshooting problems and building successful solutions. Maria is a self-motivated individual with a strong sense of personal responsibility, capable of managing projects from start to finish. Her expertise in Amazon Web Services, Java/Go/Python/C++, DevSecOps, computer security, Linux, penetration testing, and risk analysis, among others, makes her a valuable asset to any organisation. Maria, a British national, is a native English speaker and has intermediate proficiency in Urdu. ## Enrol in This Course - Course URL: https://www.edoxi.com/cism-course - Phone: +971 43801666 - Email: info@edoxi.com