This course is designed to equip participants with the knowledge and skills required to manage information security at a strategic and operational level.

Participants will learn key concepts across the CISM domains, including information security governance, information security risk management, information security program development and management, and incident management. The course also focuses on aligning security initiatives with business goals, managing risk-based decisions, improving security program effectiveness, and supporting organisational resilience.

Through structured learning, practical examples, and exam-focused guidance, participants will gain the confidence to manage information security functions, support enterprise security objectives, and prepare for the Certified Information Security Manager certification exam.

This course is suitable for IT and security professionals who are responsible for managing, overseeing, or supporting information security functions.

It is especially suitable for:

• Information security managers
• Cybersecurity managers
• IT managers
• Security consultants
• Security governance professionals
• Risk and compliance professionals
• Security operations leaders
• IT professionals moving into security management roles
• Professionals preparing for the Certified Information Security Manager certification exam

Participants should have experience in information security, IT governance, risk management, or security operations.

Before attending this course, participants are recommended to have:

• Basic understanding of information security concepts and controls
• Experience with IT or cybersecurity operations
• Familiarity with governance, risk, compliance, and incident management concepts
• Understanding of business objectives and how security supports organisational goals
• Practical experience in security, risk, governance, or IT management roles is helpful

At the end of this course, participants will be able to:

• Understand the key CISM domains and information security management responsibilities
• Apply governance and risk management practices to support business-aligned security decisions
• Develop and manage information security programs, policies, processes, and controls
• Support incident management, response planning, and organisational resilience
• Prepare for the Certified Information Security Manager certification exam

• Introduction to CISM certification, information security management, and business-aligned security leadership
• Understanding information security governance, strategy, policies, frameworks, and organisational alignment
• Managing information security risk, risk assessment, risk treatment, and risk monitoring
• Developing and managing information security programs, controls, resources, and performance
• Planning and managing incident response, communication, recovery, and continuous improvement
• Reviewing key CISM exam domains and preparing for certification