CISM: Information Security Incident Management (Part 1)

Overview/Description
Target Audience
Expected Duration
Lesson Objectives
Course Number

---

Overview/Description
Managing incidents, and the response that is put forward by an organization falls directly under the duties of a CISM. Organizations must have a plan in place, and must know the steps they will take to deal with incidents when they occur. This course examines what incident management is, how responses are prepared, and concepts and technologies that are used when dealing with incidents. This course also looks at the principles, importance of, and outcomes of incident management and how the information security manager, with the approval of senior management, prepares the people and the resources of the organization to deal with incidents when they occur. Finally, this course explains the steps for conducting a business impact analysis as technique used in effective incident management. This course prepares you for the Certified Information Security Manager (CISM) exam and follows the 2015 ISACA Candidate Information Guide.

Target Audience
Experienced IT security professionals seeking to pass the Certified Information Security Manager (CISM) exam, or otherwise gain knowledge in managing, designing, and overseeing an enterprise's information security.

Expected Duration (hours)
2.5

Lesson Objectives

CISM: Information Security Incident Management (Part 1)

identify the tasks within the incident management and response job practice area

recognize incident management planning considerations

order the steps in the incident management process

recognize the elements of an incident management plan

match causes of challenges in developing an incident management plan with corresponding solutions

recognize key points related to incident management planning

matching key incident management roles and their corresponding responsibilities

identify the roles that make up an incident response team

recognize examples of personal skills required by members of an incident response team

recognize examples of technical knowledge required by members of an incident response team

recognize the activities that are performed during a business impact analysis

conduct a business impact analysis using incident management resources

Course Number:
sp_ciso_a11_it_enus