Certified Information Security Manager (CISM) Training & Certification Course
Build practical information security governance capability through instructor-led certification-focused training with Optiv Solutions.
Course Overview
Learners develop capability across information security governance, risk management, security program development, incident management, security strategy. They learn how to interpret business and technology requirements, identify relevant risks or control objectives, evaluate evidence, document findings and communicate conclusions to stakeholders. The learning approach connects concepts to realistic scenarios, allowing participants to practice analysis, decision-making and professional documentation rather than relying only on memorization. Certification-focused exercises also help learners become familiar with the terminology, domain structure and question patterns associated with the relevant examination.
Optiv Solutions can enhance delivery by combining instructor-led explanation with structured practice, scenario discussions, guided exercises, revision checkpoints and certification-focused assessments. Learners can receive additional clarification on difficult concepts, work through organization-specific examples and reinforce key areas through targeted practice. For corporate groups, Optiv can contextualize the learning around existing governance, risk, audit, privacy, cybersecurity or technology processes while maintaining alignment with the certification objectives. This delivery model supports both examination preparation and practical workplace application.
Skills You’ll Develop
Who Should Attend
WHO SHOULD ATTEND (TARGET AUDIENCE)
• IT Directors
• Security Managers
• CISOs
• Security Governance Professionals
Pre-requisites
RECOMMENDED KNOWLEDGE BEFORE TAKING THIS COURSE
- ✓ 5 years of information security work experience
- ✓ At least 3 years of the required experience in information security management across at least 3 CISM job practice areas
- ✓ ISACA may allow waivers for up to 2 years of the required experience
Certification Exam Details
Everything you need to know about the certification exam
Exam Details
Upcoming Batch Schedule
Enroll in upcoming batches and start your learning journey
Curriculum & Course Syllabus
Module 1: Information Security Governance
- Understand the principles, terminology and objectives associated with information security governance.
- Apply information security governance concepts to realistic organizational requirements, risks and control decisions.
- Evaluate relevant evidence, outcomes or implementation considerations and communicate practical conclusions.
Module 2: Risk Management
- Understand the principles, terminology and objectives associated with risk management.
- Apply risk management concepts to realistic organizational requirements, risks and control decisions.
- Evaluate relevant evidence, outcomes or implementation considerations and communicate practical conclusions.
Module 3: Security Program Development
- Understand the principles, terminology and objectives associated with security program development.
- Apply security program development concepts to realistic organizational requirements, risks and control decisions.
- Evaluate relevant evidence, outcomes or implementation considerations and communicate practical conclusions.
Module 4: Incident Management
- Understand the principles, terminology and objectives associated with incident management.
- Apply incident management concepts to realistic organizational requirements, risks and control decisions.
- Evaluate relevant evidence, outcomes or implementation considerations and communicate practical conclusions.
Module 5: Security Strategy
- Understand the principles, terminology and objectives associated with security strategy.
- Apply security strategy concepts to realistic organizational requirements, risks and control decisions.
- Evaluate relevant evidence, outcomes or implementation considerations and communicate practical conclusions.
Student Reviews & Testimonials
Real feedback from certified professionals and corporate teams
Frequently Asked Questions
What is this course about?
This course develops the knowledge and practical understanding required for the relevant certification or professional competency, following the domains and objectives associated with the program.
Who should attend this course?
The course is intended for the professionals listed in the target-audience section, including practitioners working in the relevant governance, risk, audit, security or technology functions.
What are the prerequisites?
The prerequisites are listed in the course page and should be reviewed before enrollment. Where the certification has formal experience requirements, candidates should confirm eligibility with the certification body.
What does the examination cover?
The examination covers the certification domains associated with the course and assesses the candidate's understanding through the format and duration specified for the relevant certification.
Is the course suitable for corporate training?
Yes. Optiv Solutions can deliver the program for corporate teams and can contextualize examples, exercises and discussions around the organization's relevant processes and requirements.
How does Optiv Solutions support learners?
Optiv Solutions can provide instructor-led delivery, guided practice, revision support, scenario-based learning and certification-focused preparation to reinforce both knowledge and practical application.