CISM Certification

Following the completion of the course, participants should prove their expertise in the following 4 practical work-related domains:

• Domain 1: Information Security Governance – affirms the expertise to establish and/or maintain an information security governance framework (and supporting processes) to ensure that the information security strategy is aligned with organisational goals and objectives
• Domain 2: Information Security Risk Management – denotes advanced ability to manage information risk to an acceptable level, in accordance with organizational risk appetite, while facilitating the attainment of organisational goals and objectives
• Domain 3: Information Security Program – establishes the ability to develop and maintain an information security program that identifies, manages and protects the organization’s assets while aligning with business goals.
• Domain 4: Incident Management – validates capacity to plan, establish and manage detection, investigation, response and recovery from information security incidents in order to minimize business impact.