Course Details
Course Outline
1 - Domain 1: Governance & Risk Management (Policy, Legal & Compliance)
Define, Implement, Manage, and Maintain an Information Security Governance ProgramInformation Security DriversEstablishing an information security management structureLaws/Regulations/Standards as drivers of Organizational Policy/ Standards/ ProceduresManaging an enterprise information security compliance programRisk ManagementRisk mitigation, risk treatment, and acceptable riskRisk management frameworksNISTOther Frameworks and Guidance (ISO 31000, TARA, OCTAVE, FAIR, COBIT, and ITIL)Risk management plan implementationOngoing third-party risk managementRisk management policies and processes
2 - Domain 2: Information Security Controls, Compliance & Audit Management
Information Security ControlsCompliance ManagementGuidelines, Good and Best PracticesAudit Management
3 - Domain 3: Security Program Management and Operations
Program ManagementOperations Management
4 - Domain 4: Information Security Core Concepts
Access ControlsPhysical SecurityNetwork SecurityEndpoint ProtectionApplication SecurityEncryption TechnologiesVirtualization SecurityCloud Computing SecurityTransformative Technologies
5 - Domain 5: Strategic Planning, Finance, Procurement and Vendor Management
Strategic PlanningDesigning, Developing, and Maintaining an Enterprise Information Security ProgramUnderstanding the Enterprise Architecture (EA)FinanceProcurementVendor Management
Actual course outline may vary depending on offering center. Contact your sales representative for more information.
Who is it For?
Target Audience
This course is designed for the aspiring or sitting upper-level manager striving to advance his or her career by learning to apply their existing deep technical knowledge to business problems.