CISM: Certified Information Security Manager Prep

Master enterprise information security governance, risk assessment, program development, and incident response to excel as a security manager and pass the ISACA CISM exam.

This exam-aligned preparatory course comprehensively addresses the four core domains established by ISACA for the Certified Information Security Manager credential. Learners will develop the management-level expertise required to design security strategies, evaluate and mitigate enterprise risk, oversee technical architectures, and lead resilient incident response programs. Structured for aspiring security leaders, this curriculum blends strategic governance frameworks with practical executive decision-making skills to ensure optimal exam readiness and career advancement. Every lesson includes tutor notes, a video, a hands-on lab, exercises and a 12-question quiz you must pass at 80%, followed by a pooled final exam and free and paid practice tests. Erudex is independent and not affiliated with ISACA.

120h Certificate available

ISACA CISMInformation Security GovernanceRisk ManagementCybersecurity Leadership

Curriculum

One complete track with its own final exam and certificate.

8 modules aligned to the official exam/course outline, with a pooled final exam (80% to pass).

Examine how to align information security goals with organizational strategy while impleme

1.1 Alignment of Security Strategy with Enterprise Objectives Lab75 min
1.2 Governance Frameworks, Standards, and Benchmarks (COBIT, ISO/IEC 27001) Lab75 min
1.3 Roles and Responsibilities of the Board, Steering Committee, and CISO Lab75 min
1.4 Formulating Enterprise Information Security Policies and Standards Lab75 min
1.5 Strategic Resource Allocation and Security Architecture Design Lab75 min

You will learn to

Design and implement an information security strategy aligned with enterprise governance frameworks and business objectives.
Establish comprehensive information risk identification, assessment, and treatment processes within organizational risk tolerance.
Develop, manage, and monitor an enterprise-wide information security program across technical, operational, and human domains.
Formulate incident response plans, business continuity architectures, and disaster recovery strategies for rapid organizational resilience.
Apply ISACA standards and managerial frameworks to successfully prepare for and pass the CISM certification examination.

Prerequisites

• Foundational understanding of information security principles, networking, and IT infrastructure.
• Recommended minimum of 3 to 5 years of experience in information security or IT management roles.

Format

40 lessons · ~120 hours · 80-question exam

Careers this prepares you for

Information Security Manager
GRC Lead

How you study

Every lesson pairs an in-depth video with written notes, key takeaways, a hands-on lab, exercises and a quiz. Work at your own pace, then sit the final examination for your Erudex certificate.

CISM: Certified Information Security Manager Prep

Curriculum

Module 1Module 1: Domain 1: Information Security Governance - Strategic Alignment and Frameworks

Module 2Module 2: Domain 1: Information Security Governance - Compliance, Metrics, and Culture

Module 3Module 3: Domain 2: Information Security Risk Management - Identification and Assessment

Module 4Module 4: Domain 2: Information Security Risk Management - Treatment and Monitoring

Module 5Module 5: Domain 3: Information Security Program - Development and Design

Module 6Module 6: Domain 3: Information Security Program - Management and Operations

Module 7Module 7: Domain 4: Incident Management - Readiness and Planning

Module 8Module 8: Domain 4: Incident Management - Response, Continuity, and Recovery

Careers this prepares you for

How you study