Information Systems Security Management Professional (ISSMP) Preparation

• Certified Information Systems Security Professional (CISSP) certification
• Familiarity with information security concepts, practices, and methodologies

Audience

• Security managers
• Information security officer
• IT managers

Information Systems Security Management Professional (ISSMP) is a concentration certification within the Certified Information Systems Security Professional (CISSP) program offered by (ISC)², which focuses on the managerial aspects of information security.

This instructor-led, live training (online or onsite) is aimed at advanced-level security managers who wish to be well-equipped with the knowledge and skills needed to excel in the exam and their roles as security management professionals.

By the end of this training, participants will be able to:

• Understand the five domains of ISSMP.
• Develop skills to manage an information security program.
• Learn to establish and maintain security governance.
• Gain insights into risk management, incident response, and continuity planning.
• Prepare effectively for the ISSMP certification exam.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Introduction to ISSMP and Security Leadership and Management

• Overview of ISSMP certification
• Understanding the ISSMP domains
• Leadership and management principles
• Security management frameworks and standards
• Establishing and maintaining security programs

Security Lifecycle Management

• Information security governance
• Security program development and management
• Policy, procedure, standards, and guidelines development
• Security metrics and reporting

Risk Management and Incident Response

• Risk management frameworks and methodologies
• Conducting risk assessments
• Incident response planning and management
• Business continuity and disaster recovery planning

Contingency Management

• Business continuity planning (BCP)
• Disaster recovery planning (DRP)
• Crisis management
• Exercises and testing of plans

Law, Ethics, and Security Compliance Management

• Legal and regulatory issues in information security
• Privacy laws and regulations
• Ethical issues in information security
• Compliance management

Strategic Planning and Financial Management

• Strategic planning for information security
• Financial management in security programs
• Budgeting and financial reporting
• Cost-benefit analysis for security investments

Exam Preparation and Practice

• Review of all ISSMP domains
• Exam preparation strategies
• Practice exams and question reviews
• Time management for exam day

Final Review and Exam Readiness

• Final review of key concepts
• Individual study plans
• Mock exams and feedback
• Final Q&A session

Summary and Next Steps