Course Outline
Introduction to ISSMP and Security Leadership and Management
- Overview of ISSMP certification
- Understanding the ISSMP domains
- Leadership and management principles
- Security management frameworks and standards
- Establishing and maintaining security programs
Security Lifecycle Management
- Information security governance
- Security program development and management
- Policy, procedure, standards, and guidelines development
- Security metrics and reporting
Risk Management and Incident Response
- Risk management frameworks and methodologies
- Conducting risk assessments
- Incident response planning and management
- Business continuity and disaster recovery planning
Contingency Management
- Business continuity planning (BCP)
- Disaster recovery planning (DRP)
- Crisis management
- Exercises and testing of plans
Law, Ethics, and Security Compliance Management
- Legal and regulatory issues in information security
- Privacy laws and regulations
- Ethical issues in information security
- Compliance management
Strategic Planning and Financial Management
- Strategic planning for information security
- Financial management in security programs
- Budgeting and financial reporting
- Cost-benefit analysis for security investments
Exam Preparation and Practice
- Review of all ISSMP domains
- Exam preparation strategies
- Practice exams and question reviews
- Time management for exam day
Final Review and Exam Readiness
- Final review of key concepts
- Individual study plans
- Mock exams and feedback
- Final Q&A session
Summary and Next Steps
Requirements
- Certified Information Systems Security Professional (CISSP) certification
- Familiarity with information security concepts, practices, and methodologies
Audience
- Security managers
- Information security officer
- IT managers
Testimonials (5)
The fact that there were practical examples with the content
Smita Hanuman - Standard Bank of SA Ltd
Course - Basel III – Certified Basel Professional
Speed of response and communication
Bader Bin rubayan - Lean Business Services
Course - ISO/IEC 27001 Lead Implementer
The knowledge and understanding of the trainer on the training material was exceptional. The trainer was well aware of the subject, provided practical examples in relevance. I would highly recommend him as a trainer for this training.
Tayyeb Mahmood - Ajman Municipality
Course - COBIT 2019 Foundation
The trainer was extremely clear and concise. Very easy to understand and absorb the information.
Paul Clancy - Rowan Dartington
Course - CGEIT – Certified in the Governance of Enterprise IT
The trainer was very motivated and knowledgeable. The trainer was not only capable of information transfer, she also brought it with humor to lighten the dry theoretical training subject.