Certified Information Security Manager (CISM)

Advance your information security management expertise

Strong information security starts with strategic leadership. You’ll explore the core domains of the Certified Information Security Manager (CISM) certification, connecting governance, risk management, security programme development, and incident response to real-world business priorities while preparing confidently for the certification exam.

Establish strong foundations in security governance

Discover how effective governance supports organisational objectives through strategic planning, leadership, compliance, and stakeholder engagement. Explore how security frameworks align with business goals and create the foundation for resilient information security management.

Manage risk and build resilient security programmes

Progress from identifying and evaluating information security risks to developing enterprise-wide security programmes. Examine risk assessment methods, security frameworks, operational controls, and third-party management to strengthen resilience across everyday IT operations.

Lead effective incident response with confidence

Complete your journey by exploring how organisations prepare for, respond to, and recover from security incidents. From incident response planning and business impact analysis to business continuity, disaster recovery, and post-incident reviews, you’ll strengthen your ability to minimise disruption and support continuous security improvement.

This course is ideal for aspiring or current information security professionals aiming to pursue the Certified Information Security Manager (CISM) certification. Also suitable for security managers, risk professionals, IT leaders, governance specialists, and anyone responsible for developing, managing, or overseeing enterprise security programmes.

This course is ideal for aspiring or current information security professionals aiming to pursue the Certified Information Security Manager (CISM) certification. Also suitable for security managers, risk professionals, IT leaders, governance specialists, and anyone responsible for developing, managing, or overseeing enterprise security programmes.

• Integrate governance principles into operations effectively
• Manage security risks using robust assessment methodologies
• Implement incident management aligned with regulations
• Identify and categorize incidents for prompt resolution
• Create essential policies for organizational resilience
• Ace post-incident reviews for continuous improvement