0101 - Information risk management

Prepare to pass the Certified Information Security Manager (CISM) exam. In this course, Mike Chapple dives into the topic of information security risk management practices, helping you bolster your ability to identify, assess, and mitigate risks as you prepare for the Information Risk Management exam domain. Mike goes over the key steps of the risk assessment process, the possible risk management options, and frameworks and tools that can help you keep your organization safe. He also includes comprehensive coverage of the many cybersecurity threats facing modern organizations, including viruses, adware, and advanced persistent threats (APTs). Learn about business continuity, disaster recovery, legal and regulatory compliance, and more.

Topics include:

Using information classification
Selecting and implementing security controls
Conducting ongoing risk management activities
Comparing adware, spyware, and ransomware
Dangers posed by advanced persistent threats (APTs)
Understanding attackers
Types of attacks, including networking and password attacks
Social engineering attacks
Scanning for vulnerabilities
Business continuity and disaster recovery planning
Managing vendor relationships