You're reading from Certified Information Security Manager Exam Prep Guide Gain the confidence to pass the CISM exam using test-oriented study material

Product type Paperback

Published in Dec 2022

Publisher Packt

ISBN-13 9781804610633

Length 718 pages

Edition 2nd Edition

Concepts

Information Security

Author (1):

Hemang Doshi

View More author details

Table of Contents (12) Chapters

Preface

Online Exam-Prep Tools

1. Enterprise Governance FREE CHAPTER

2. Information Security Strategy

3. Information Risk Assessment

4. Information Risk Response

5. Information Security Program Development

6. Information Security Program Management

7. Information Security Infrastructure and Architecture

8. Information Security Monitoring Tools and Techniques

9. Incident Management Readiness

10. Incident Management Operations

11. Answers to Practice Questions

Risk Management Integration with Life Cycle

A security manager should understand that risk management activities are not one-time events. Risk management is a continuous process. For effective risk management, the related activities should be integrated with the process life cycle.

System Development Life Cycle

A security manager should be aware of the following system development life cycle (SDLC) phases:

Phase	Description
Phase 1: Initiation/Feasibility	The Objective, purpose, and scope of the system are discussed, finalized, and documented. In this phase, the system design is finalized and approved. Internal controls should also be incorporated during the initial design stage. During the feasibility phase (planning or initiation), the process for change management should be defined. It is very important to prevent scope creep...

Phase

Description

Phase 1: Initiation/Feasibility

The Objective, purpose, and scope of the system are discussed, finalized, and documented.

In this phase, the system design is finalized and approved. Internal controls should also be incorporated during the initial design stage.

During the feasibility phase (planning or initiation), the process for change management should be defined. It is very important to prevent scope creep...