CISM Certification Training

Lesson 1 • Security Strategy Alignment

Links security objectives to business goals using strategic planning tools. Demonstrates how misalignment creates risk and reduces programme effectiveness.

Lesson 2 • Policies, Standards, and Procedures

Covers the policy hierarchy from high-level directives to operational procedures. Provides the document architecture needed to enforce governance decisions.

Lesson 3 • Governance Concepts and Frameworks

Defines governance versus management and maps key frameworks to organisational needs. Anchors the chapter by establishing vocabulary used throughout the course.

Lesson 4 • Governance Metrics and Reporting

Introduces key performance and risk indicators used to measure governance effectiveness. Prepares candidates to present security posture to executive audiences.

Lesson 1 • Risk Identification Techniques

Covers asset inventories, threat modelling, and vulnerability discovery methods. Feeds directly into the analysis and evaluation sections that follow.

Lesson 2 • Continuous Risk Monitoring

Establishes processes for ongoing risk tracking and reassessment. Ensures the risk register remains current as the threat landscape evolves.

Lesson 3 • Risk Treatment and Response

Examines the four treatment options and criteria for selecting controls. Connects risk analysis outputs to actionable security investment decisions.

Lesson 4 • Risk Analysis and Evaluation

Applies qualitative and quantitative techniques to prioritise identified risks. Enables informed decision-making by translating risk data into business impact.

Lesson 1 • Building a Compliance Programme

Guides construction of a structured compliance programme with clear ownership. Translates regulatory requirements into operational controls and audit evidence.

Lesson 2 • Audit and Assessment Management

Covers internal and external audit processes, evidence preparation, and findings remediation. Prepares the security manager to lead audit engagements confidently.

Lesson 3 • Contractual and Third-Party Obligations

Addresses security clauses in contracts and vendor compliance requirements. Extends the compliance programme beyond organisational boundaries.

Lesson 4 • Legal Liability and Incident Reporting

Examines legal exposure from security incidents and mandatory reporting timelines. Connects compliance obligations to the incident management chapters ahead.

Lesson 1 • Technology and Control Management

Addresses control selection, implementation oversight, and technology lifecycle management. Bridges governance decisions to technical security operations.

Lesson 2 • Security Awareness and Training Programmes

Designs role-based awareness programmes that reduce human-factor risk. Demonstrates how training metrics feed back into programme effectiveness measurement.

Lesson 3 • Security Programme Architecture

Defines the components of a comprehensive security programme and their interdependencies. Provides the structural blueprint used throughout programme development.

Lesson 4 • Resource and Budget Management

Covers security budget justification, allocation, and tracking techniques. Equips managers to defend spending decisions using risk and business value arguments.

Lesson 1 • Scenario-Based Risk Workshops

Uses structured scenarios to practise end-to-end risk assessment execution. Reinforces analytical skills through applied problem-solving before the exam.

Lesson 2 • Supply Chain and Third-Party Risk

Examines risk introduced through vendors, partners, and software supply chains. Builds on earlier compliance content by adding risk-based vendor evaluation.

Lesson 3 • Emerging Technology Risk

Assesses risk from AI, IoT, and operational technology environments. Prepares managers to evaluate novel threats before formal standards exist.

Lesson 4 • Cloud and Virtualisation Risk

Identifies unique risk factors in cloud service models and shared responsibility boundaries. Extends foundational risk skills to modern infrastructure environments.

Lesson 1 • Crisis Communication and Notification

Manages internal escalation, external notifications, and media relations during incidents. Connects legal notification obligations to operational communication plans.

Lesson 2 • Incident Management Lifecycle

Defines the phases of incident management and the roles involved at each stage. Provides the operational framework applied in all subsequent sections.

Lesson 3 • Incident Response Planning

Covers the design and maintenance of incident response plans and playbooks. Ensures the organisation can respond consistently before an incident occurs.

Lesson 4 • Digital Forensics Fundamentals

Introduces evidence collection, chain of custody, and forensic analysis basics. Supports legal and regulatory obligations covered in the compliance chapter.

Lesson 1 • Business Continuity Planning

Translates BIA findings into actionable continuity strategies and documented plans. Ensures critical functions can continue during and after disruptive events.

Lesson 2 • Testing and Exercising Plans

Covers the spectrum of continuity tests from walkthroughs to full interruption exercises. Validates plan effectiveness and identifies gaps before a real event.

Lesson 3 • Business Impact Analysis

Identifies critical processes, dependencies, and recovery time objectives through structured analysis. Provides the data foundation for all continuity planning decisions.

Lesson 4 • Disaster Recovery Planning

Focuses on IT system recovery procedures, backup strategies, and failover architectures. Complements BCP by addressing the technical recovery layer.

Lesson 1 • CISM Exam Structure and Domains

Reviews the four CISM domains, question format, and scoring methodology. Orients candidates to the exam blueprint before focused review begins.

Lesson 2 • Weak Area Identification and Remediation

Uses diagnostic practice results to target remaining knowledge gaps. Ensures efficient use of final study time before the exam date.

Lesson 3 • Scenario-Based Question Practice

Applies a structured approach to dissecting and answering scenario-based questions. Develops the managerial perspective required to select best-answer options.

Lesson 4 • Exam Day Readiness

Prepares candidates for logistics, time management, and mental performance on exam day. Closes the course with confidence-building strategies and final review.