CISM 2013: Information Security Program Development and Management (Part 2)

An information security framework represents the entire IS management structure. This course examines governance frameworks such as COBIT and industry standards like ISO/IEC 27001. This course also examines the components of a security framework: operational components, management components, administrative components, and education and informational components. The course then explains how an IS program road map is defined, and the elements that make up the road map. Finally, the course describes the security architectures and how they are implemented. This course prepares you for the Certified Information Security Manager (CISM) exam.

• Describe the function of COBIT in the information security management framework
• Identify the objectives of the information security management framework
• Describe the function of ISO/IEC 27001 in the information security management framework
• Recognize the components of the information security management framework
• Create an information security program road map
• Recognize what the information security architecture involves
• Recognize the questions an information security manager should ask when building an IS architecture
• Develop an information security management framework