Reviews 5,0
Reviews 5,0
Certified Information Security Manager® (CISM)
Information security can no longer be managed reactively – it requires strategic ownership, coherent governance, and the ability to navigate risks across complex organizations. CISM is the benchmark certification for professionals who take on that responsibility.
Key topics
- Designing and leading organizational information security programs.
- Building governance, risk, and compliance frameworks that work in practice.
- Safeguarding critical business processes and sensitive organizational data.
- Addressing AI-related security risks and establishing automated control mechanisms.
- Tracking security performance, program maturity, and control effectiveness over time.
Prerequisites
A background in IT, information security, or risk management is expected, along with familiarity with how organizations manage security-related decisions.
Target group
Security professionals, IT managers, and governance specialists who hold or are moving into roles responsible for shaping and steering enterprise-wide security strategy.
CISM prepares professionals to take full ownership of information security at a strategic level – with practical insight, recognized standards, and the management depth that modern organizations require.
Course content
Information security management fundamentals
- Corporate governance in a security context
- Security culture in organizations
- Knowing legal, regulatory, and contractual obligations
- Structures, roles, and responsibilities at a glance
- Developing an information security strategy
- Building and evolving an IS strategy
- Frameworks and standards for information management
- Strategic planning: budgets, resources, and business cases
Risk assessment and treatment in security management
- Systematically assessing information security risks
- Identifying new risks and threat landscapes
- Analyzing vulnerabilities and control deficiencies
- Conducting risk assessment and analysis
- Responding appropriately to IS risks
- Treatment options for identified risks
- Clarifying responsibilities for risks and controls
- Monitoring and reporting on risks
Building and managing information security programs
- Designing and building IS programs
- Allocating resources: personnel, tools, and technologies
- Identifying and classifying information assets
- Applying security standards and frameworks
- Defining security policies and guidelines
- Using metrics to measure effectiveness
- Continuously managing the IS program
- Selecting and designing security controls
- Implementing and integrating security measures
- Regularly verifying control effectiveness
- Conducting training and awareness initiatives
- Managing external service providers and partners
- Communicating and reporting on progress
Incident and emergency management
- Developing an incident response plan
- Conducting a business impact analysis (BIA)
- Creating a business continuity plan (BCP)
- Building a disaster recovery plan (DRP)
- Classifying and categorizing incidents
- Training and testing incident management processes
- Operational incident management workflows
- Tools and techniques for incident management
- Investigating and evaluating incidents
- Methods for containing incidents
- Crisis communication: reporting, notification, and escalation
- Resolving incidents and restoring systems
- Conducting systematic post-incident reviews
Up to 100% funding for your continuing education
Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.
Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.
What does the CISM certification stand for?
- CISM stands for Certified Information Security Manager, awarded by ISACA. It is an internationally recognized qualification for strategic information security management.
Who benefits most from CISM?
- Specialists and managers responsible for information security, IT risks, compliance, and security strategies within their organization benefit most.
What subject areas does CISM encompass?
- The certification covers information security governance, risk management, security program development, and incident and crisis management.
What experience is required for CISM?
- Several years of professional experience in information security are mandatory. Relevant degrees or certificates may substitute for part of the experience requirement.
What makes CISM a globally recognized standard?
- Being awarded by ISACA, its strategic focus, and its cross-industry applicability make CISM one of the most significant qualifications in security management worldwide.
How does CISM advance your career?
- CISM expands career opportunities, supports advancement into leadership roles, and builds credibility in security management, audit, and compliance.
What sets CISM apart from purely technical certifications?
- CISM targets management-level professionals and focuses on processes, decisions, and strategic oversight rather than on technical implementation details.
