book

Certified Information Security Manager Exam Prep Guide - Second Edition

Name: Certified Information Security Manager Exam Prep Guide - Second Edition
Author: Hemang Doshi
ISBN: 9781804610633

by Hemang Doshi

December 2022

Beginner

718 pages

14h 15m

English

Packt Publishing

Read now

Unlock full access

Certified Information Security Manager Exam Prep Guide
Second EditionWhy subscribe?ContributorsAbout the authorAbout the reviewersPackt is searching for authors like you
Preface
Online Exam-Prep ToolsWho This Book Is ForWhat This Book CoversHow to Get the Most Out of This BookRecorded LecturesRequirements for the Online ContentInstructions for Unlocking the Online ContentQuick Access to the WebsiteCISM Syllabus – 2022Download a free PDF copy of this book
Enterprise Governance
Importance of Information Security Governance Desired Outcomes of Good Information Security GovernanceResponsibility for Information Security GovernanceSteps for Establishing GovernanceGovernance FrameworkTop-Down and Bottom-Up ApproachesKey Aspects from the CISM Exam PerspectiveA Note on the Practice QuestionsPractice Question Set 1Organizational CultureAcceptable Usage PolicyEthics TrainingPractice Question Set 2Legal, Regulatory, and Contractual RequirementsKey Aspects from the CISM Exam PerspectivePractice Question Set 3Retention of Business RecordsElectronic DiscoveryKey Aspects from the CISM Exam PerspectivePractice Question Set 4Organizational StructureBoard of DirectorsSecurity Steering CommitteeReporting of Security FunctionsCentralized vis-à-vis Decentralized Security FunctioningPractice Question Set 5Information Security Roles and ResponsibilitiesRACI ChartBoard of DirectorsSenior ManagementBusiness Process OwnersSteering CommitteeChief Information Security OfficerChief Operating OfficerData CustodianCommunication ChannelIndicators of a Security CultureKey Aspects from the CISM Exam PerspectivePractice Question Set 6Maturity ModelKey Aspects from the CISM Exam PerspectivePractice Question Set 7Governance of Third-Party RelationshipsInformation Security Governance MetricsThe Objective of MetricsTechnical Metrics vis-à-vis Governance-Level MetricsCharacteristics of Effective MetricsKey Aspects from the CISM Exam PerspectivePractice Question Set 8SummaryRevision Questions
Information Security Strategy
Information Security Strategy and PlanInformation Security PoliciesKey Aspects from the CISM Exam Perspective Practice Question Set 1Information Governance Frameworks and Standards The Objective of Information Security GovernanceInformation Security/Cybersecurity Management Frameworks The IT Balanced ScorecardPractice Question Set 2Information Security ProgramsKey Aspects from the CISM Exam PerspectivePractice Question Set 3Enterprise Information Security Architecture Challenges in Designing the Security ArchitectureBenefits of Security ArchitectureKey Aspects from the CISM Exam PerspectivePractice Question Set 4Awareness and EducationIncreasing the Effectiveness of Security TrainingKey Aspects from the CISM Exam PerspectiveGovernance, Risk Management, and ComplianceKey Aspects from the CISM Exam PerspectivePractice Question Set 5Senior Management Commitment Information Security InvestmentStrategic AlignmentKey Aspects from the CISM Exam PerspectivePractice Question Set 6Business Case and Feasibility StudyKey Aspects from the CISM Exam PerspectivePractice Question Set 7SummaryRevision Questions
Information Risk Assessment
Understanding RiskKey Aspects from the CISM Exam PerspectivePractice Question Set 1Differentiating Risk Identification, Risk Analysis, and Risk EvaluationRisk ManagementRisk AssessmentRisk AnalysisRisk EvaluationDifferentiating Risk Capacity, Risk Appetite, and Risk ToleranceKey Aspects from the CISM Exam PerspectivePractice Question Set 2Inherent Risk and Residual RiskInherent RiskResidual RiskDifferentiating between Inherent Risk and Residual RiskKey Aspects from the CISM Exam PerspectivePractice Question Set 3Phases of Risk ManagementPhases of Risk Management The Outcome of a Risk Management ProgramKey Aspects from the CISM Exam PerspectivePractice Question Set 4Risk AwarenessTailored Awareness ProgramsTraining EffectivenessAwareness Training for Senior ManagementKey Aspects from the CISM Exam PerspectivePractice Question Set 5Risk AssessmentPhases of Risk AssessmentKey Aspects from the CISM Exam Perspective Practice Question Set 6Risk Identification Risk Identification ProcessConducting InterviewsDelphi TechniqueAsset IdentificationAsset ValuationAggregated and Cascading Risk Aggregated RiskCascading RiskKey Aspects from the CISM Exam PerspectivePractice Question Set 7Risk AnalysisQuantitative Risk AnalysisChallenges in Implementing the Quantitative MethodQualitative Risk AnalysisSemi-Quantitative Risk AnalysisThe Best Method for Risk AnalysisAnnual Loss ExpectancyValue at Risk (VaR)OCTAVEOther Risk Analysis MethodsKey Aspects from the CISM Exam PerspectivePractice Question Set 8Risk EvaluationRisk RankingPractice Question Set 9Risk RegisterPractice Question Set 10Emerging Risk and the Threat LandscapeEmerging ThreatsAdvanced Persistent ThreatsPractice Question Set 11Vulnerability and Control DeficiencyKey Aspects from the CISM Exam PerspectivePractice Question Set 12Security BaselinesRisk Communication Summary
Information Risk Response
Risk Treatment/Risk Response OptionsRisk MitigationRisk Sharing/TransferringRisk AvoidanceRisk AcceptanceKey Aspects from the CISM Exam PerspectivePractice Question Set 1Risk Ownership and AccountabilityKey Aspects from the CISM Exam PerspectivePractice Question Set 2Risk Monitoring and CommunicationRisk ReportingKey Risk IndicatorsReporting Significant Changes in RiskKey Aspects from the CISM Exam PerspectivePractice Question Set 3Implementing Risk ManagementRisk Management ProcessIntegrating Risk Management into Business ProcessesPrioritization of Risk ResponseDefining a Risk Management FrameworkDefining the External and Internal EnvironmentDetermining the Risk Management ContextGap AnalysisCost-Benefit AnalysisOther Kinds of Organizational SupportKey Aspects from the CISM Exam PerspectivePractice Question Set 4Change ManagementObjectives of Change ManagementApproval from the System OwnerRegression TestingInvolvement of the Security TeamPreventive ControlsKey Aspects from the CISM Exam PerspectivePractice Question Set 5Patch ManagementKey Aspects from the CISM Exam PerspectivePractice Question Set 6Operational Risk ManagementRecovery Time ObjectiveRecovery Point ObjectiveDifference between RTO and RPORTO and RPO for Critical SystemsRTO, RPO, and Maintenance CostsRTO, RPO, and Disaster ToleranceRTO, RPO, and BIAService Delivery ObjectiveMaximum Tolerable OutageAllowable Interruption WindowPractice Question Set 7Risk Management Integration with Life CycleSystem Development Life CycleKey Aspects from the CISM Exam PerspectivePractice Question Set 8SummaryRevision Questions
Information Security Program Development
Information Security Program OverviewIdeal Outcomes of an Information Security ProgramStrategic AlignmentRisk ManagementValue DeliveryResource ManagementPerformance ManagementAssurance Process IntegrationThe Starting Point of a Security ProgramInformation Security CharterSupport from Senior ManagementDefense in DepthKey Aspects from the CISM Exam PerspectivePractice Question Set 1Information Security Program ResourcesInformation Asset Identification and ClassificationBenefits of ClassificationUnderstanding the Steps Involved in ClassificationSuccess Factors for the Effective Classification of AssetsCriticality, Sensitivity, and Impact AssessmentBusiness Dependency AssessmentRisk AnalysisBusiness InterruptionsKey Aspects from the CISM Exam PerspectivePractice Question Set 2Information Asset ValuationDetermining the Criticality of AssetsKey Aspects from the CISM Exam PerspectivePractice Question Set 3Industry Standards and Frameworks for Information SecurityFramework – Success FactorsSome Industry-Recognized FrameworksKey Aspects from the CISM Exam PerspectivePractice Question Set 4Information Security Policies, Procedures, and GuidelinesReviewing and Updating DocumentsKey Aspects from the CISM Exam PerspectivePractice Question Set 5Defining an Information Security Program RoadmapGap AnalysisThe Value of a Security ProgramIntegration of the Security Program with Other DepartmentsKey Aspects from the CISM Exam PerspectivePractice Question Set 6Information Security Program MetricsObjective of MetricsMonitoringAttributes of Effective MetricsInformation Security Objectives and MetricsUseful Metrics for ManagementKey Aspects from the CISM Exam PerspectivePractice Question Set 7SummaryRevision Questions
Information Security Program Management
Information Security Control Design and SelectionCountermeasuresGeneral Controls and Application-Level ControlsControl CategoriesFailure Modes – Fail Closed or Fail OpenContinuous MonitoringKey Aspects from the CISM Exam PerspectivePractice Question Set 1Security Baseline ControlsDeveloping a Security BaselineKey Aspects from the CISM Exam PerspectivePractice Question Set 2Information Security Awareness and TrainingKey Aspects from the CISM Exam PerspectivePractice Question Set 3Management of External Services and RelationshipsEvaluation Criteria for OutsourcingSteps for OutsourcingOutsourcing – Risk Reduction OptionsProvisions for Outsourcing ContractsThe Security Manager's Role in OutsourcingService-Level AgreementsRight-to-Audit ClauseImpact of Privacy Laws on OutsourcingSubcontracting/Fourth PartyCompliance ResponsibilityKey Aspects from the CISM Exam PerspectivePractice Question Set 4DocumentationInformation Security Program ObjectivesKey Aspects from the CISM Exam PerspectivePractice Question Set 5Security BudgetKey Aspects from the CISM Exam PerspectivePractice Question Set 6Security Program Management and Administrative ActivitiesInformation Security TeamRoles and ResponsibilitiesExternal ResourcesAcceptable Usage PolicyDocumentationProject ManagementProgram BudgetingPlan – Do – Check – ActSecurity OperationsKey Aspects from the CISM Exam PerspectivePractice Question Set 7Privacy LawsPractice Question Set 8Cloud ComputingCloud Computing – Deployment ModelsThe Private CloudThe Public CloudThe Community CloudThe Hybrid CloudTypes of Cloud ServicesCloud Computing – the Security Manager's RoleKey Aspects from the CISM Exam PerspectivePractice Question Set 9SummaryRevision Questions
Information Security Infrastructure and Architecture
Information Security ArchitectureKey Aspects from the CISM Exam PerspectivePractice Question Set 1Architecture ImplementationKey Aspects from the CISM Exam PerspectivePractice Question Set 2Access ControlMandatory Access ControlDiscretionary Access ControlRole-Based Access ControlDegaussing (Demagnetizing)Key Aspects from the CISM Exam PerspectivePractice Question Set 3Virtual Private NetworksVPNs – Technical AspectsAdvantages of a VPNVPN Security RisksVirtual Desktop EnvironmentsKey Aspects from the CISM Exam PerspectivePractice Question Set 4BiometricsBiometrics – Accuracy MeasureFalse Acceptance RateFalse Rejection RateCross Error Rate or Equal Error RateRelationship between FAR and FRRThe Most Reliable Biometric IdentifierBiometric Sensitivity TuningControl over the Biometric ProcessTypes of Biometric AttacksPractice Question Set 5Factors of AuthenticationPassword ManagementKey Aspects from the CISM Exam PerspectivePractice Question Set 6Wireless NetworksEncryptionEnabling MAC FilteringDisabling a Service Set IdentifierDisabling Dynamic Host Configuration ProtocolCommon Attack Methods and Techniques for Wireless NetworksRogue Access PointsWardrivingWarwalkingWarchalkingKey Aspects from the CISM Exam PerspectivePractice Question Set 7Different Attack Methods for Information SecurityKey Aspects from the CISM Exam PerspectivePractice Question Set 8SummaryRevision Questions
Information Security Monitoring Tools and Techniques
Firewall Types and ImplementationsTypes of FirewallsPacket filtering RouterStateful InspectionCircuit-LevelApplication-LevelTypes of Firewall ImplementationDual-Homed FirewallScreened Host FirewallScreened Subnet Firewall (DMZ)Placement of FirewallsSource RoutingFirewall Types and Their Corresponding OSI LayersKey Aspects from the CISM Exam PerspectivePractice Question Set 1Intrusion Detection Systems and Intrusion Prevention SystemsIntrusion Detection SystemsNetwork-Based and Host-Based IDSsComponents of an IDSLimitations of an IDSTypes of IDSPlacement of IDSsIntrusion Prevention SystemsDifference between IDSs and IPSsHoneypots and HoneynetsKey Aspects from the CISM Exam PerspectivePractice Question Set 2Digital SignaturesSteps for Creating a Digital SignatureWhat is a Hash or a Message Digest?Key Aspects from the CISM Exam PerspectivePractice Question Set 3Public Key InfrastructurePKI TerminologyProcesses Involved in PKICA versus RASingle Point of FailureFunctions of an RAKey Aspects from the CISM Exam PerspectivePractice Question Set 4CryptographySymmetric Encryption vis-à-vis Asymmetric EncryptionEncryption KeysThe Use of Keys for Different ObjectivesConfidentialityAuthenticationNon-RepudiationIntegrityKey Aspects from the CISM Exam Perspective Practice Question Set 5Penetration TestingAspects to be Covered within the Scope of Penetration TestingTypes of Penetration TestsExternal TestingInternal TestingBlind TestingDouble-Blind TestingTargeted TestingWhite Box Testing and Black Box Testing Risks Associated with Penetration TestingKey Aspects from the CISM Exam PerspectivePractice Question Set 6SummaryRevision Questions

Incident Management Readiness
Incident Management and Incident Response OverviewThe Relationship between Incident Management and Incident ResponseThe Objectives of Incident ManagementPhases of the Incident Management Life CyclePhase 1 – Planning and PreparationPhase 2 – Detection, Triage, and InvestigationPhase 3 – Containment and RecoveryPhase 4 – Post-Incident ReviewPhase 5 – Incident ClosureIncident Management, Business Continuity, and Disaster RecoveryIncident Management and the Service Delivery ObjectiveMaximum Tolerable Outage (MTO) and Allowable Interruption Window (AIW)Key Aspects from the CISM Exam PerspectivePractice Question Set 1Incident Management and Incident Response PlansElements of the IRPPreparationIdentification and TriageContainmentEradicationRecoveryLessons LearnedGap AnalysisBusiness Impact AnalysisGoals of a BIASteps of a BIAEscalation ProcessHelp Desk/Service Desk Process for the Identification of IncidentsIncident Management and Response TeamsIncident Notification ProcessChallenges in Developing an Incident Management PlanKey Aspects from the CISM Exam PerspectivePractice Question Set 2Business Continuity and Disaster Recovery ProceduresPhases of Recovery PlanningRecovery SitesMirrored SiteHot SiteWarm SiteCold SiteMobile SiteReciprocal AgreementsFactors Impacting Recovery Site SelectionAllowable Interruption WindowRecovery Time ObjectiveRecovery Point ObjectiveService Delivery ObjectiveMaximum Tolerable OutageContinuity of Network ServicesAlternative RoutingDiverse RoutingKey Aspects from the CISM Exam PerspectivePractice Question Set 3InsuranceKey Aspects from the CISM Exam PerspectivePractice Question Set 4Incident Classification/CategorizationHelp/Service Desk Processes for Identifying Security IncidentsPractice Question Set 5Testing Incident Response, BCP, and DRPTypes of TestsChecklist ReviewStructured Walk-throughSimulation TestParallel TestFull Interruption TestEffectiveness of TestsCategory of TestsPaper Test/Desk-based EvaluationPreparedness TestFull Operational TestRecovery Test MetricsSuccess Criteria for TestsKey Aspects from the CISM Exam PerspectivePractice Question Set 6SummaryRevision Questions
Incident Management Operations
Incident Management Tools and TechnologiesIncident Management SystemsSecurity Information and Event ManagementEndpoint Detection and ResponseExtended Detection and ResponseManaged Detection and ResponsePersonnelIncident Response TeamsAuditsOutsourced Security ProvidersPractice Question Set 1Executing Response and Recovery PlansKey Aspects from the CISM Exam PerspectivePractice Question Set 2Incident Containment MethodsPractice Question Set 3Incident Response CommunicationsPractice Question Set 4Incident EradicationPractice Question Set 5RecoveryPractice Question Set 6Post-Incident Activities and InvestigationsIdentifying the Root Cause and Taking Corrective ActionDocumenting EventsChain of CustodyKey Aspects from the CISM Exam PerspectivePractice Question Set 7Incident Response ProceduresThe Outcome of Incident ManagementThe Role of the Information Security ManagerSecurity Information and Event ManagementKey Aspects from the CISM Exam PerspectivePractice Question Set 8Incident Management Metrics and IndicatorsKey Performance Indicators and Key Goal IndicatorsMetrics for Incident ManagementReporting to Senior ManagementThe Current State of Incident Response CapabilitiesHistory of IncidentsThreats and VulnerabilitiesThreatsVulnerabilitiesSummaryRevision Questions
Answers to Practice Questions
Chapter 1: Enterprise GovernancePractice Question Set 1Practice Question Set 2Practice Question Set 3Practice Question Set 4Practice Question Set 5Practice Question Set 6Practice Question Set 7Practice Question Set 8Revision Questions Chapter 2: Information Security StrategyPractice Question Set 1Practice Question Set 2Practice Question Set 3Practice Question Set 4Practice Question Set 5Practice Question Set 6Practice Question Set 7Revision Questions Chapter 3: Information Risk AssessmentPractice Question Set 1Practice Question Set 2Practice Question Set 3Practice Question Set 4Practice Question Set 5Practice Question Set 6Practice Question Set 7Practice Question Set 8Practice Question Set 9Practice Question Set 10Practice Question Set 11Practice Question Set 12Chapter 4: Information Risk ResponsePractice Question Set 1Practice Question Set 2Practice Question Set 3Practice Question Set 4Practice Question Set 5Practice Question Set 6Practice Question Set 7Practice Question Set 8Revision QuestionsChapter 5: Information Security Program DevelopmentPractice Question Set 1Practice Question Set 2Practice Question Set 3Practice Question Set 4Practice Question Set 5Practice Question Set 6Practice Question Set 7Revision QuestionsChapter 6: Information Security Program ManagementPractice Question Set 1Practice Question Set 2Practice Question Set 3Practice Question Set 4Practice Question Set 5Practice Question Set 6Practice Question Set 7Practice Question Set 8Practice Question Set 9Revision QuestionsChapter 7: Information Security Infrastructure and ArchitecturePractice Question Set 1Practice Question Set 2Practice Question Set 3Practice Question Set 4Practice Question Set 5Practice Question Set 6Practice Question Set 7Practice Question Set 8Revision QuestionsChapter 8: Information Security Monitoring Tools and TechniquesPractice Question Set 1Practice Question Set 2Practice Question Set 3Practice Question Set 4Practice Question Set 5Practice Question Set 6Revision QuestionsChapter 9: Incident Management ReadinessPractice Question Set 1Practice Question Set 2Practice Question Set 3Practice Question Set 4Practice Question Set 5Practice Question Set 6Revision QuestionsChapter 10: Incident Management OperationsPractice Question Set 1Practice Question Set 2Practice Question Set 3Practice Question Set 4Practice Question Set 5Practice Question Set 6Practice Question Set 7Practice Question Set 8Revision Questions

Content preview from Certified Information Security Manager Exam Prep Guide - Second Edition

Information Security Monitoring Tools and Techniques

In this chapter, you will learn about the methods, tools, and techniques for monitoring information security. You will explore the technical aspects of firewall implementation and understand the functions of intrusion prevention systems (IPSs) and intrusion detection systems (IDSs). You will also discover some important aspects of digital signatures, public key infrastructure (PKI), and asymmetric encryption, which are very important from the CISM exam perspective.

The following topics will be covered in this chapter:

Firewall Types and Implementations
Intrusion Detection Systems and Intrusion Prevention Systems
Digital Signatures
Elements of Public Key Infrastructure
Cryptography
Penetration ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

CISM Certified Information Security Manager Practice Exams, Second Edition, 2nd Edition

Publisher Resources

ISBN: 9781804610633

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Certified Information Security Manager Exam Prep Guide - Second Edition

by Hemang Doshi

Information Security Monitoring Tools and Techniques

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.