CISM: Certified Information Security Manager

53s 1. Lesson 1: Information Security Governance Overview 1m 12s 2. Information Security Governance Overview Part1 2m 3. Information Security Governance Overview Part2 1m 22s 4. Information Security Governance Overview Part3 1m 32s 5. Information Security Governance Overview Part4 30s 6. Information Security Governance Overview Part5 6m 21s 7. Importance of Information Security Governance Part1 1m 19s 8. Importance of Information Security Governance Part2 33s 9. Outcomes of Information Security Governance Part1 1m 26s 10. Outcomes of Information Security Governance Part2 2m 45s 11. Outcomes of Information Security Governance Part3 1m 27s 12. Outcomes of Information Security Governance Part4 1m 54s 13. Outcomes of Information Security Governance Part5 1m 28s 14. Outcomes of Information Security Governance Part6 31s 15. Lesson 2: Effective Information Security Governance 1m 31s 16. Business Goals and Objectives Part1 2m 17. Business Goals and Objectives Part2 1m 2s 18. Roles and Responsibilities of Senior Management Part1 43s 19. Roles and Responsibilities of Senior Management Part2 1m 21s 20. Domain Tasks Part1 3m 16s 21. Domain Tasks Part2 45s 22. Business Model for Information Security Part1 1m 9s 23. Business Model for Information Security Part2 3m 16s 24. Business Model for Information Security Part3 1m 37s 25. Business Model for Information Security Part4 34s 26. Dynamic Interconnections Part1 2m 55s 27. Dynamic Interconnections Part2 1m 55s 28. Dynamic Interconnections Part3 51s 29. Dynamic Interconnections Part4 3m 27s 30. Lesson 3: Information Security Concepts and Technologies 2m 58s 31. Information Security Concepts and Technologies Part1 3m 25s 32. Information Security Concepts and Technologies Part2 1m 50s 33. Information Security Concepts and Technologies Part3 1m 41s 34. Technologies Part1 6m 12s 35. Technologies Part2 33s 36. Lesson 4: Information Security Manager 1m 48s 37. Responsibilities 48s 38. Senior Management Commitment Part1 2m 27s 39. Senior Management Commitment Part2 24s 40. Obtaining Senior Management Commitment Part1 53s 41. Obtaining Senior Management Commitment Part2 1m 13s 42. Establishing Reporting and Communication Channels Part1 1m 7s 43. Establishing Reporting and Communication Channels Part2 1m 55s 44. Lesson 5: Scope and Charter of Information Security Governance 2m 24s 45. Assurance Process Integration and Convergence 2m 32s 46. Convergence 2m 38s 47. Governance and Third-Party Relationships 56s 48. Lesson 6: Information Security Governance Metrics 1m 39s 49. Metrics 1m 46s 50. Effective Security Metrics Part1 1m 1s 51. Effective Security Metrics Part2 1m 51s 52. Effective Security Metrics Part3 39s 53. Effective Security Metrics Part4 1m 17s 54. Security Implementation Metrics 2m 56s 55. Strategic Alignment Part1 1m 11s 56. Strategic Alignment Part2 1m 14s 57. Risk Management 1m 2s 58. Value Delivery 47s 59. Resource Management Part1 41s 60. Resource Management Part2 3m 6s 61. Performance Measurement 2m 54s 62. Assurance Process Integration/Convergence 53s 63. Lesson 7: Information Security Strategy Overview 41s 64. Another View of Strategy 16s 65. Lesson 8: Creating Information Security Strategy 1m 22s 66. Information Security Strategy 4m 38s 67. Common Pitfalls Part1 2m 19s 68. Common Pitfalls Part2 1m 33s 69. Objectives of the Information Security Strategy 1m 40s 70. What is the Goal? 1m 23s 71. Defining Objectives 1m 48s 72. Business Linkages 1m 44s 73. Business Case Development Part1 2m 36s 74. Business Case Development Part2 45s 75. Business Case Development Part3 57s 76. Business Case Objectives 1m 48s 77. The Desired State 1m 8s 78. COBIT 1m 9s 79. COBIT Controls 48s 80. COBIT Framework 1m 38s 81. Capability Maturity Model 1m 22s 82. Balanced Scorecard 1m 3s 83. Architectural Approaches 1m 84. ISO/IEC 27001 and 27002 1m 39s 85. Risk Objectives Part1 3m 11s 86. Risk Objectives Part2 45s 87. Lesson 9: Determining Current State Of Security 2m 37s 88. Current Risk Part1 1m 11s 89. Current Risk Part2 1m 11s 90. BIA 1m 52s 91. Lesson 10: Information Security Strategy Development 1m 1s 92. The Roadmap 3m 27s 93. Elements of a Strategy 2m 46s 94. Strategy Resources and Constraints 32s 95. Lesson 11: Strategy Resources 1m 1s 96. Policies and Standards 5m 48s 97. Definitions 1m 30s 98. Enterprise Information Security Architectures 3m 99. Controls 55s 100. Countermeasures 1m 50s 101. Technologies 1m 54s 102. Personnel 3m 47s 103. Organizational Structure 28s 104. Employee Roles and Responsibilities 1m 17s 105. Skills 1m 41s 106. Audits 2m 24s 107. Compliance Enforcement 1m 41s 108. Threat Assessment 2m 21s 109. Vulnerability Assessment 2m 19s 110. Risk Assessment 2m 4s 111. Insurance 2m 32s 112. Business Impact Assessment 2m 57s 113. Outsourced Security Providers 23s 114. Lesson 12: Strategy Constraints 1m 43s 115. Legal and Regulatory Requirements 2m 56s 116. Physical Constraints 1m 36s 117. The Security Strategy 1m 13s 118. Lesson 13: Action Plan to Implement Strategy 1m 35s 119. Gap Analysis Part1 52s 120. Gap Analysis Part2 3m 1s 121. Gap Analysis Part3 1m 42s 122. Policy Development Part1 1m 123. Policy Development Part2 2m 45s 124. Standards Development 35s 125. Training and Awareness 1m 23s 126. Action Plan Metrics 23s 127. General Metric Considerations Part1 35s 128. General Metric Considerations Part2 43s 129. General Metric Considerations Part3 23s 130. General Metric Considerations Part4 2m 131. CMM4 Statements 47s 132. Objectives for CMM4 44s 133. Domain 01 Review

59s 1. Lesson 1: Risk Management Overview 1m 51s 2. Risk Management Overview 7m 8s 3. Types of Risk Analysis 2m 14s 4. The Importance of Risk Management 1m 35s 5. Risk Management Outcomes 1m 49s 6. Risk Management Strategy 4m 14s 7. Lesson 2: Good Information Security Risk Management 3m 8s 8. Context and Purpose 39s 9. Scope and Charter 2m 31s 10. Assets 2m 2s 11. Other Risk Management Goals 2m 52s 12. Roles and Responsibilities 6m 6s 13. Lesson 3: Information Security Risk Management Concepts 6m 39s 14. Technologies 2m 8s 15. Lesson 4: Implementing Risk Management 2m 16. The Risk Management Framework 1m 48s 17. The External Environment 2m 7s 18. The Internal Environment 47s 19. The Risk Management Context 2m 21s 20. Gap Analysis 4m 9s 21. Other Organizational Support 1m 22s 22. Risk Analysis 1m 19s 23. Lesson 5: Risk Assessment 3m 49s 24. NIST Risk Assessment Methodology 2m 54s 25. Aggregated or Cascading Risk 1m 18s 26. Other Risk Assessment Approaches 1m 49s 27. Identification of Risks 1m 8s 28. Threats 2m 11s 29. Vulnerabilities Part1 4m 10s 30. Vulnerabilities Part2 1m 36s 31. Risks 1m 48s 32. Analysis of Relevant Risks 1m 52s 33. Semi -Quantitative Analysis 4m 14s 34. Quantitative Analysis Example 46s 35. Evaluation of Risks 4m 39s 36. Risk Treatment Options 2m 59s 37. Impact 25s 38. Lesson 6: Controls Countermeasures 4m 43s 39. Controls 3m 38s 40. Residual Risk 1m 33s 41. Information Resource Valuation 1m 36s 42. Methods of Valuing Assets 3m 32s 43. Information Asset Classification 2m 5s 44. Determining Classification 3m 53s 45. Impact Part1 1m 3s 46. Impact Part2 49s 47. Lesson 7: Recovery Time Objectives 4m 18s 48. Recovery Point Objectives 1m 58s 49. Service Delivery Objectives 1m 44s 50. Third-Party Service Providers 2m 8s 51. Working with Lifecycle Processes 2m 12s 52. IT System Development 47s 53. Project Management Part1 2m 10s 54. Project Management Part2 1m 17s 55. Lesson 8: Risk Monitoring and Communication 38s 56. Risk Monitoring and Communication 1m 25s 57. Other Communications 1m 1s 58. Domain 02 Review

31s 1. Introduction 2m 50s 2. Lesson 1: Development of Information Security Program 52s 3. Importance of the Program 1m 47s 4. Outcomes of Security Program Development 4m 59s 5. Effective Information Security Program Development 10s 6. Lesson 2: Information Security Program Objectives 1m 55s 7. Cross Organizational Responsibilities 2m 23s 8. Program Objectives Part1 1m 18s 9. Program Objectives Part2 2m 11s 10. Defining Objectives Part1 1m 8s 11. Defining Objectives Part2 4m 2s 12. Lesson 3: Information Security Program Development Concepts Part1 5m 39s 13. Information Security Program Development Concepts Part2 2m 44s 14. Technology Resources 1m 25s 15. Information Security Manager 30s 16. Lesson 4: Scope and Charter of Information Security Program Development 1m 35s 17. Assurance Function Integration 1m 54s 18. Challenges in Developing Information Security Program 2m 48s 19. Pitfalls 2m 6s 20. Objectives of the Security Program 2m 52s 21. Program Goals 1m 46s 22. The Steps of the Security Program 1m 38s 23. Defining the Roadmap Part1 58s 24. Defining the Roadmap Part2 1m 18s 25. Elements of the Roadmap Part1 34s 26. Elements of the Roadmap Part2 1m 57s 27. Elements of the Roadmap Part3 1m 17s 28. Elements of the Roadmap Part4 18s 29. Elements of the Roadmap Part5 44s 30. Gap Analysis 15s 31. Lesson 5: Information Security Management Framework 4m 55s 32. Security Management Framework 5m 59s 33. COBIT 5 4m 30s 34. ISO/IEC 27001 13s 35. Lesson 6: Information Security Framework Components 1m 56s 36. Operational Components Part1 3m 11s 37. Operational Components Part2 1m 31s 38. Management Components 3m 30s 39. Administrative Components 1m 26s 40. Educational and Informational Components 1m 32s 41. Lesson 7: Information Security Program Resources 3m 27s 42. Resources 54s 43. Documentation 4m 29s 44. Enterprise Architecture Part1 1m 54s 45. Enterprise Architecture Part2 1m 11s 46. Enterprise Architecture Part3 3m 42s 47. Controls as Strategy Implementation Resources Part1 2m 20s 48. Controls as Strategy Implementation Resources Part2 4m 35s 49. Controls as Strategy Implementation Resources Part3 2m 19s 50. Controls as Strategy Implementation Resources Part4 1m 41s 51. Common Control Practices 37s 52. Countermeasures 1m 13s 53. Technologies Part1 1m 52s 54. Technologies Part2 1m 39s 55. Technologies Part3 5m 38s 56. Technologies Part4 2m 57. Personnel Part1 2m 56s 58. Personnel Part2 1m 28s 59. Security Awareness 5m 18s 60. Awareness Topics 1m 16s 61. Formal Audits 1m 3s 62. Compliance Enforcement 3m 9s 63. Project Risk Analysis 2m 58s 64. Other Actions 1m 21s 65. Other Organizational Support 1m 3s 66. Program Budgeting Part1 2m 19s 67. Program Budgeting Part2 13s 68. Lesson 8: Implementing an Information Security Program 2m 38s 69. Policy Compliance 2m 44s 70. Standards Compliance 1m 43s 71. Training and Education 3m 52s 72. ISACA Control Objectives 1m 8s 73. Third-party Service Providers Part1 4m 22s 74. Third-party Service Providers Part2 2m 14s 75. Integration into Lifecycle Processes 3m 33s 76. Monitoring and Communication 1m 17s 77. The Plan of Action Part1 1m 36s 78. The Plan of Action Part2 53s 79. Lesson 9: Information Infrastructure and Architecture 4m 42s 80. Managing Complexity Part1 1m 45s 81. Managing Complexity Part2 1m 30s 82. Objectives of Information Security Architectures Part1 1m 15s 83. Objectives of Information Security Architectures Part2 3m 32s 84. Physical and Environmental Controls 3m 3s 85. Lesson 10: Information Security Program 2m 27s 86. Information Security Program Deployment Metrics 2m 2s 87. Metrics 53s 88. Strategic Alignment 1m 41s 89. Risk Management 35s 90. Value Delivery 1m 23s 91. Resource Management 27s 92. Assurance Process Integration 41s 93. Performance Measurement 38s 94. Security Baselines 48s 95. Lesson 11: Security Program Services and Operational Activities 10m 17s 96. IS Liaison Responsibilities Part1 2m 28s 97. IS Liaison Responsibilities Part2 1m 34s 98. Cross-Organizational Responsibilities 3m 27s 99. Security Reviews and Audits Part1 1m 38s 100. Security Reviews and Audits Part2 1m 25s 101. Management of Security Technology 4m 10s 102. Due Diligence Part1 1m 36s 103. Due Diligence Part2 2m 2s 104. Compliance Monitoring and Enforcement Part1 1m 46s 105. Compliance Monitoring and Enforcement Part2 2m 17s 106. Assessment of Risk and Impact Part1 1m 28s 107. Assessment of Risk and Impact Part2 2m 33s 108. Outsourcing and Service Providers 1m 37s 109. Cloud Computing Part1 1m 54s 110. Cloud Computing Part2 2m 23s 111. Cloud Computing Part3 42s 112. Integration with IT Processes 1m 13s 113. Domain 03 Review

47s 1. Lesson 1: Incident Management Overview Part1 3m 8s 2. Incident Management Overview Part2 3m 45s 3. Incident Management Overview Part3 2m 44s 4. Types of Events Part1 3m 20s 5. Types of Events Part2 4m 45s 6. Goals of Incident Management Part1 6m 31s 7. Goals of Incident Management Part2 3m 26s 8. Goals of Incident Management Part3 23s 9. Lesson 2: Incident Response Procedures Part1 3m 40s 10. Incident Response Procedures Part2 8m 1s 11. Importance of Incident Management 3m 50s 12. Outcomes of Incident Management 1m 35s 13. Incident Management 3m 44s 14. Concepts Part1 1m 35s 15. Concepts Part2 1m 34s 16. Concepts Part3 4m 2s 17. Incident Management Systems Part1 53s 18. Incident Management Systems Part2 2m 31s 19. Lesson 3: Incident Management Organization 3m 44s 20. Responsibilities Part1 2m 58s 21. Responsibilities Part2 5m 10s 22. Responsibilities Part3 1m 2s 23. Senior Management Commitment 25s 24. Lesson 4: Incident Management Resources 36s 25. Policies and Standards 11m 12s 26. Incident Response Technology Concepts 3m 11s 27. Personnel 8m 24s 28. Roles and Responsibilities (eNotes) 8m 9s 29. Skills 1m 20s 30. Awareness and Education 2m 49s 31. Audits 17s 32. Lesson 5: Incident Management Objectives 48s 33. Defining Objectives 3m 29s 34. The Desired State 6m 42s 35. Strategic Alignment 2m 33s 36. Other Concerns 5m 14s 37. Lesson 6: Incident Management Metrics and Indicators 3m 1s 38. Implementation of the Security Program Management 1m 35s 39. Management Metrics and Monitoring Part1 2m 48s 40. Management Metrics and Monitoring Part2 4m 24s 41. Other Security Monitoring Efforts 11s 42. Lesson 7: Current State of Incident Response Capability 4m 39s 43. Threats 6m 15s 44. Vulnerabilities 44s 45. Lesson 8: Developing an Incident Response Plan 8m 19s 46. Elements of an Incident Response Plan 3m 5s 47. Gap Analysis 5m 5s 48. BIA Part1 2m 48s 49. BIA Part2 2m 45s 50. Escalation Process for Effective IM 1m 27s 51. Help Desk Processes for Identifying Security Incidents 2m 10s 52. Incident Management and Response Teams 1m 55s 53. Organizing, Training, and Equipping the Response Staff 55s 54. Incident Notification Process 2m 18s 55. Challenges in making an Incident Management Plan 7m 49s 56. Lesson 9: BCP/DRP 2m 2s 57. Goals of Recovery Operations Part1 1m 57s 58. Goals of Recovery Operations Part2 5m 37s 59. Choosing a Site Selection Part1 1m 18s 60. Choosing a Site Selection Part2 3m 58s 61. Implementing the Strategy 2m 10s 62. Incident Management Response Teams 4m 17s 63. Network Service High-availability 4m 1s 64. Storage High-availability 1m 27s 65. Risk Transference 1m 29s 66. Other Response Recovery Plan Options 2m 17s 67. Lesson 10: Testing Response and Recovery Plans 1m 17s 68. Periodic Testing 2m 6s 69. Analyzing Test Results Part1 3m 39s 70. Analyzing Test Results Part2 58s 71. Measuring the Test Results 1m 56s 72. Lesson 11: Executing the Plan 1m 15s 73. Updating the Plan 1m 38s 74. Intrusion Detection Policies 1m 52s 75. Who to Notify about an Incident 1m 53s 76. Recovery Operations 1m 57s 77. Other Recovery Operations 3m 5s 78. Forensic Investigation 11m 50s 79. Hacker / Penetration Methodology 1m 15s 80. Domain 04 Review 34s 81. Course Closure