The CISM Boot Camp was an incredible experience. The instructors were knowledgeable and engaging, and the material was presented in a way that was easy to understand and apply.
Before Class
Why It Matters
Training Camp sets you up for success by ensuring you’re well-prepared before class begins. We provide comprehensive pre-course materials, including study guides, e-learning modules, and practice questions, to help you familiarize yourself with key ISACA CISM concepts and assess your current knowledge. You will also receive a detailed course roadmap and access to our expert instructors for any pre-class questions. This preparation ensures you arrive ready to fully engage in the intensive training, maximizing your learning experience and boosting your confidence for exam day.
Day 1 – Information Security Governance
AM
Morning - Welcome and Introduction to ISACA CISM Boot Camp
- Overview of ISACA CISM Exam Format and Study Strategy
- Information Security Governance
- Organizational Culture
PM
Afternoon - Legal, Regulatory and Contractual Requirements
- Organizational Structures, Roles and Responsibilities
- Information Security Strategy Development
- Information Governance Frameworks and Standards
- Strategic Planning (e.g., Budgets, Resources, Business Case)
Why It Matters
Mastering information security governance enables professionals to align security initiatives with organizational goals, ensuring compliance with legal and regulatory requirements. Understanding strategic planning, roles, and responsibilities empowers you to develop effective security strategies, implement governance frameworks, and manage resources efficiently. This knowledge is crucial for protecting organizational assets and fostering a culture of security.
Day 2 – Information Risk Management
AM
Morning - Information Security Risk Management
- Emerging Risk and Threat Landscape
- Vulnerability and Control Deficiency Analysis
- Risk Assessment and Analysis
PM
Afternoon - Risk Treatment / Risk Response Options
- Risk and Control Ownership
- Risk Monitoring and Reporting
Why It Matters
Effective information risk management is essential for identifying and addressing potential threats to an organization’s assets. Understanding the emerging risk landscape, conducting thorough risk assessments, and analyzing vulnerabilities enable proactive mitigation strategies. By mastering risk treatment, ownership, and monitoring, you can ensure that risks are managed effectively and reported accurately, safeguarding organizational resilience and continuity.
Day 3 – Information Security Program
AM
Morning - Information Security Program
- Information Security Program Resources (e.g., People, Tools, Technologies)
- Information Asset Identification and Classification
- Industry Standards and Frameworks for Information Security
- Information Security Policies, Procedures and Guidelines
- Information Security Program Metrics
- Information Security Control Design and Selection
PM
Afternoon - Information Security Control Implementation and Integrations
- Information Security Control Testing and Evaluation
- Information Security Awareness and Training
- Management of External Services (e.g., Providers, Suppliers, Third Parties, Fourth Parties)
- Information Security Program Communications and Reporting
Why It Matters
Building and managing an effective information security program is crucial for safeguarding an organization’s assets and maintaining operational resilience. Identifying and classifying information assets, designing and implementing controls, and aligning with industry standards ensure comprehensive protection. Effective awareness training and external service management foster a culture of security, while robust metrics, communication, and reporting enhance program transparency and continuous improvement.
Day 4 – Information Security Incident Management
AM
Morning - Incident Management
- Incident Response Plan
- Business Impact Analysis (BIA)
- Business Continuity Plan (BCP)
- Disaster Recovery Plan (DRP)
- Incident Classification/Categorization
- Incident Management Training, Testing and Evaluation
PM
Afternoon - Incident Management Tools and Techniques
- Incident Investigation and Evaluation
- Incident Containment Methods
- Incident Response Communications (e.g., Reporting, Notification, Escalation)
- Incident Eradication and Recovery
- Post-Incident Review Practices
Why It Matters
Effective information security incident management is critical for minimizing the impact of security breaches on an organization. Developing and testing incident response, business continuity, and disaster recovery plans ensures preparedness for unforeseen events. By mastering tools, techniques, and communication strategies, you can efficiently contain, investigate, and recover from incidents. Post-incident reviews foster continuous improvement, strengthening organizational resilience and reducing future vulnerabilities.
