The Certificate in Information Security Management Principles (CISMP) Exam Preparation Training Course

• Definitions, meanings and use of concepts and terms across information security management
• The need for, and the benefits of information security

 Information risk

• The threats to and vulnerabilities of information systems
• The processes for understanding and managing risk relating to information systems
• The threats to and vulnerabilities of information systems
• The processes for understanding and managing risk relating to information systems

• How risk management should be implemented in an organisation
• General principles of law, legal jurisdiction and associated topics as they affect information security management
• The importance and relevance of the information lifecycle
• The stages of the information lifecycle.
• Concepts of the design process lifecycle
• Technical audit and review processes, effective change control and configuration management
• The risks to security brought about by systems development and support

• The risks to information security involving people
• User access controls that may be used to manage those risks
• The importance of appropriate training

• The technical controls that can be used to help ensure protection from malicious software
• Issues relating to value-added services
• Issues relating to organisations that utilise cloud computing
• Issues relating to information systems

Disaster Recovery and Business continuity

• The differences between and the need for business continuity and disaster recovery.

• The principles and common practices, including any legal constraints and obligations, of investigations and forensics
• The role of cryptography in protecting systems and assets, including awareness of the relevant standards and practices