Course Outline
Introduction to ISSMP and Security Leadership and Management
- Overview of ISSMP certification.
- Understanding the ISSMP domains.
- Leadership and management principles.
- Security management frameworks and standards.
- Establishing and maintaining security programs.
Security Lifecycle Management
- Information security governance.
- Security program development and management.
- Development of policies, procedures, standards, and guidelines.
- Security metrics and reporting.
Risk Management and Incident Response
- Risk management frameworks and methodologies.
- Conducting risk assessments.
- Incident response planning and management.
- Business continuity and disaster recovery planning.
Contingency Management
- Business continuity planning (BCP).
- Disaster recovery planning (DRP).
- Crisis management.
- Exercises and testing of plans.
Law, Ethics, and Security Compliance Management
- Legal and regulatory issues in information security.
- Privacy laws and regulations.
- Ethical issues in information security.
- Compliance management.
Strategic Planning and Financial Management
- Strategic planning for information security.
- Financial management in security programs.
- Budgeting and financial reporting.
- Cost-benefit analysis for security investments.
Exam Preparation and Practice
- Review of all ISSMP domains.
- Exam preparation strategies.
- Practice exams and question reviews.
- Time management for exam day.
Final Review and Exam Readiness
- Final review of key concepts.
- Individual study plans.
- Mock exams and feedback.
- Final Q&A session.
Summary and Next Steps
Requirements
- Must hold the Certified Information Systems Security Professional (CISSP) certification.
- Existing familiarity with information security concepts, practices, and methodologies.
Target Audience
- Security managers.
- Information security officers.
- IT managers.
Testimonials (4)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
learning about Basel
Daksha Vallabh - Standard Bank of SA Ltd
Course - Basel III – Certified Basel Professional
Risk optimization is more clear than the other subjects
Munirah Alsahli - GOSI
Course - CGEIT – Certified in the Governance of Enterprise IT
The knowledge and understanding of the trainer on the training material was exceptional. The trainer was well aware of the subject, provided practical examples in relevance. I would highly recommend him as a trainer for this training.