{"title":"Governance, Risk, \u0026 Compliance","description":"","products":[{"product_id":"cissp-training-and-certification-exam-preparation","title":"CISSP® Training and Certification Prep Course","description":"\u003cdiv\u003e\n\u003cp\u003eThe \u003cstrong\u003eCISSP Training and Certification\u003c\/strong\u003e Prep Course is a comprehensive training course aimed at preparing individuals for the CISSP Certified Information Systems Security Professional exam. The course covers various aspects of information security, including security measures, data security, and system security. The curriculum also includes a focus on security architecture, application security, and cryptographic keys. Participants will learn about the ISC2 code of ethics and the CIA triad, as well as the trusted platform module (TPM) 2.0.\u003c\/p\u003e\r\n\u003cp\u003eIndividuals who complete the course will gain a solid understanding of the skills and knowledge required to pass the CISSP exam, which is administered by Pearson VUE. To become CISSP certified, candidates must have a minimum of five years of work experience in the field of information security.\u003c\/p\u003e\r\n\u003cp\u003eThe course also covers the latest developments in information security, including the requirements for operating systems and the impact of data breaches on sensitive information. Participants will learn about social engineering and the importance of a comprehensive information security program.\u003c\/p\u003e\r\n\u003cp\u003eThe CISSP Training and Certification Prep Course provides the essential knowledge and skills required to become a CISSP-certified professional, with a focus on protecting the confidentiality, integrity, and availability of information.\u003c\/p\u003e\r\n\u003cp\u003eU.S. DoDM 8140.03 APPROVED BY DEPARTMENT OF DEFENSE\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eCISSP® Training and Certification Prep Course Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eIn this CISSP Certification prep course, you will:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eManage security and risk.\u003c\/li\u003e\n\u003cli\u003ePractice securing assets.\u003c\/li\u003e\n\u003cli\u003eDesign security framework.\u003c\/li\u003e\n\u003cli\u003eSecure communication and networks.\u003c\/li\u003e\n\u003cli\u003eSecurely develop software.\u003c\/li\u003e\n\u003cli\u003eLearn from official ISC2 real-world instructors using ISC2 course materials with a preferred official partner.\u003c\/li\u003e\n\u003cli\u003eGet practical insights into the 8 domains of the CISSP CBK (Common Body of Knowledge).\u003c\/li\u003e\n\u003cli\u003eCreate a test study strategy by assessing strengths and weaknesses.\u003c\/li\u003e\n\u003cli\u003eReceive a voucher for the CISSP certification exam included with the course tuition.\u003c\/li\u003e\n\u003cli\u003eContinue learning and face new challenges with after-course one-on-one instructor coaching.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCISSP Certification Prep Training Prerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eTo succeed in this course and pass the exam, you should meet the \u003ca href=\"https:\/\/www.isc2.org\/cissp\/default.aspx\" title=\"CISSP Exam Requirements | ISC2 Home\" rel=\"nofollow noopener\" target=\"_blank\"\u003especific requirements established by ISC2\u003c\/a\u003e.\u003c\/p\u003e\n\u003cp\u003eIf you do not have the required experience, you should consider taking the \u003ca href=\"https:\/\/www.isc2.org\/how-to-become-an-associate.aspx\" title=\"Associate of ISC2 | ISC2 Home\" rel=\"nofollow noopener\" target=\"_blank\"\u003eAssociate of ISC2 exam\u003c\/a\u003e first.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCISSP Certification Exam Information\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eIn addition to the domain weighting changes, the time limit for the computerized adaptive testing (CAT) exam will be a maximum of three hours beginning April 15, 2024. Candidates taking the CAT version of the exam (currently only available in English) will see a minimum of 100 and a maximum of 150 items. \u003c\/p\u003e\n\u003cp\u003eAttendees can self-submit our courses for the following \u003ca href=\"https:\/\/www.isc2.org\/CPE-Portal-Questions\" title=\"CPE Portal Questions | (ISC)² Home\" rel=\"nofollow noopener\" target=\"_blank\"\u003eCPE credit\u003c\/a\u003e:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eGroup A credits for attending any of our cybersecurity courses, and\u003c\/li\u003e\n\u003cli\u003eGroup B General Education credits for attending any other Learning Tree course they attend.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eCISSP Training Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 1: Security and Risk Management\u003c\/h4\u003e\n\u003cp\u003eIn this module, you will learn how to:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eUnderstand, adhere to, and promote professional ethics\u003c\/li\u003e\n\u003cli\u003eUnderstand and apply security concepts\u003c\/li\u003e\n\u003cli\u003eEvaluate and apply security governance principles\u003c\/li\u003e\n\u003cli\u003eDetermine compliance and other requirements\u003c\/li\u003e\n\u003cli\u003eUnderstand legal and regulatory issues that pertain to information security in a holistic context\u003c\/li\u003e\n\u003cli\u003eUnderstand requirements for investigation types (i.e., administrative, criminal, civil, regulatory, industry standards)\u003c\/li\u003e\n\u003cli\u003eDevelop, document, and implement security policy, standards, procedures, and guidelines\u003c\/li\u003e\n\u003cli\u003eIdentify, analyze, and prioritize Business Continuity (\u003cabbr title=\"Business Continuity\"\u003eBC\u003c\/abbr\u003e) requirements\u003c\/li\u003e\n\u003cli\u003eContribute to and enforce personnel security policies and procedures\u003c\/li\u003e\n\u003cli\u003eUnderstand and apply risk management concepts\u003c\/li\u003e\n\u003cli\u003eUnderstand and apply threat modeling concepts and methodologies\u003c\/li\u003e\n\u003cli\u003eApply Supply Chain Risk Management (\u003cabbr title=\"Supply Chain Risk Management\"\u003eSCRM\u003c\/abbr\u003e) concepts\u003c\/li\u003e\n\u003cli\u003eEstablish and maintain a security awareness, education, and training program\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 2: Asset Security\u003c\/h4\u003e\n\u003cp\u003eIn this module, you will learn how to:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify and classify information and assets\u003c\/li\u003e\n\u003cli\u003eEstablish information and asset handling requirements\u003c\/li\u003e\n\u003cli\u003eProvision resources securely\u003c\/li\u003e\n\u003cli\u003eManage data lifecycle\u003c\/li\u003e\n\u003cli\u003eEnsure appropriate asset retention (e.g., End-of-Life (\u003cabbr title=\"End-of-Life\"\u003eEOL\u003c\/abbr\u003e), End-of-Support (\u003cabbr title=\"End-of-Support\"\u003eEOS\u003c\/abbr\u003e))\u003c\/li\u003e\n\u003cli\u003eDetermine data security controls and compliance requirements\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 3: Security Architecture and Engineering\u003c\/h4\u003e\n\u003cp\u003eIn this module, you will learn how to:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eResearch, implement and manage engineering processes using secure design principles\u003c\/li\u003e\n\u003cli\u003eUnderstand the fundamental concepts of security models (e.g., Biba, Star Model, Bell-LaPadula)\u003c\/li\u003e\n\u003cli\u003eSelect controls based upon systems security requirements\u003c\/li\u003e\n\u003cli\u003eUnderstand security capabilities of Information Systems (\u003cabbr title=\"Information Systems\"\u003eIS\u003c\/abbr\u003e) (e.g., memory protection, Trusted Platform Module (\u003cabbr title=\"Trusted Platform Module\"\u003eTPM\u003c\/abbr\u003e), encryption\/decryption)\u003c\/li\u003e\n\u003cli\u003eAssess and mitigate the vulnerabilities of security architectures, designs, and solution elements\u003c\/li\u003e\n\u003cli\u003eSelect and determine cryptographic solutions\u003c\/li\u003e\n\u003cli\u003eUnderstand methods of cryptanalytic attacks\u003c\/li\u003e\n\u003cli\u003eApply security principles to site and facility design\u003c\/li\u003e\n\u003cli\u003eDesign site and facility security controls\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 4: Communication and Network Security\u003c\/h4\u003e\n\u003cp\u003eIn this module, you will learn how to:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eAssess and implement secure design principles in network architectures\u003c\/li\u003e\n\u003cli\u003eSecure network components\u003c\/li\u003e\n\u003cli\u003eImplement secure communication channels according to design\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 5: Identity and Access Management (IAM)\u003c\/h4\u003e\n\u003cp\u003eIn this module, you will learn how to:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eControl physical and logical access to assets\u003c\/li\u003e\n\u003cli\u003eManage identification and authentication of people, devices, and services\u003c\/li\u003e\n\u003cli\u003eFederated identity with a third-party service\u003c\/li\u003e\n\u003cli\u003eImplement and manage authorization mechanisms\u003c\/li\u003e\n\u003cli\u003eManage the identity and access provisioning lifecycle\u003c\/li\u003e\n\u003cli\u003eImplement authentication systems\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 6: Security Assessment and Testing\u003c\/h4\u003e\n\u003cp\u003eIn this module, you will learn how to:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDesign and validate assessment, test, and audit strategies\u003c\/li\u003e\n\u003cli\u003eConduct security control testing\u003c\/li\u003e\n\u003cli\u003eCollect security process data (e.g., technical and administrative)\u003c\/li\u003e\n\u003cli\u003eAnalyze test output and generate a report\u003c\/li\u003e\n\u003cli\u003eConduct or facilitate security audits\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 7: Security Operations\u003c\/h4\u003e\n\u003cp\u003eIn this module, you will learn how to:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eUnderstand and comply with investigations\u003c\/li\u003e\n\u003cli\u003eConduct logging and monitoring activities\u003c\/li\u003e\n\u003cli\u003ePerform Configuration Management (\u003cabbr title=\"Configuration Managemen\"\u003eCM\u003c\/abbr\u003e) (e.g., provisioning, baselining, automation)\u003c\/li\u003e\n\u003cli\u003eApply foundational security operations concepts\u003c\/li\u003e\n\u003cli\u003eApply resource protection\u003c\/li\u003e\n\u003cli\u003eConduct incident management\u003c\/li\u003e\n\u003cli\u003eOperate and maintain detective and preventative measures\u003c\/li\u003e\n\u003cli\u003eImplement and support patch and vulnerability management\u003c\/li\u003e\n\u003cli\u003eUnderstand and participate in change management processes\u003c\/li\u003e\n\u003cli\u003eImplement recovery strategies\u003c\/li\u003e\n\u003cli\u003eImplement Disaster Recovery (\u003cabbr title=\"Disaster Recovery\"\u003eDR\u003c\/abbr\u003e) processes\u003c\/li\u003e\n\u003cli\u003eTest Disaster Recovery Plans (\u003cabbr title=\"Disaster Recovery Plans\"\u003eDRP\u003c\/abbr\u003e)\u003c\/li\u003e\n\u003cli\u003eParticipate in Business Continuity (BC) planning and exercises\u003c\/li\u003e\n\u003cli\u003eImplement and manage physical security\u003c\/li\u003e\n\u003cli\u003eAddress personnel safety and security concerns\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 8: Software Development Security\u003c\/h4\u003e\n\u003cp\u003eIn this module, you will learn how to:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eUnderstand and integrate security in the Software Development Life Cycle (\u003cabbr title=\"Software Development Life Cycle\"\u003eSDLC\u003c\/abbr\u003e)\u003c\/li\u003e\n\u003cli\u003eIdentify and apply security controls in software development ecosystems\u003c\/li\u003e\n\u003cli\u003eAssess the effectiveness of software security\u003c\/li\u003e\n\u003cli\u003eAssess security impact of acquired software\u003c\/li\u003e\n\u003cli\u003eDefine and apply secure code\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e","brand":"Learning Tree","offers":[{"title":"26AB95US \/ 2026-10-19T09:00:00 \/ Online","offer_id":47803707359399,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"26AB96US \/ 2026-10-26T09:00:00 \/ Herndon","offer_id":47803710668967,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"26BC58US \/ 2026-11-16T09:00:00 \/ Online","offer_id":47803710767271,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"26BC59US \/ 2026-11-30T09:00:00 \/ New York","offer_id":47803710800039,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"26CA28CN \/ 2026-12-07T09:00:00 \/ Online","offer_id":47803710865575,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"26CB70US \/ 2026-12-14T09:00:00 \/ Aurora","offer_id":47803710898343,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"271A36CN \/ 2027-01-25T09:00:00 \/ Toronto","offer_id":47803711160487,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"271C38US \/ 2027-01-04T09:00:00 \/ Herndon","offer_id":47803711193255,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"271C39US \/ 2027-01-11T09:00:00 \/ Arlington","offer_id":47803711226023,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"272B70US \/ 2027-02-08T09:00:00 \/ Austin","offer_id":47854266187943,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"273B90US \/ 2027-03-01T09:00:00 \/ New York","offer_id":47998103683239,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"273A32CN \/ 2027-03-15T09:00:00 \/ Ottawa","offer_id":48121981665447,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"274B89US \/ 2027-04-05T09:00:00 \/ Herndon","offer_id":48327092076711,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"274B90US \/ 2027-04-12T09:00:00 \/ Arlington","offer_id":48387830087847,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"274A31CN \/ 2027-04-19T09:00:00 \/ Toronto","offer_id":48563413057703,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"275C38US \/ 2027-05-03T09:00:00 \/ Austin","offer_id":49257313894567,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"275C39US \/ 2027-05-10T09:00:00 \/ New York","offer_id":49582796144807,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"275C40US \/ 2027-05-17T09:00:00 \/ San Francisco","offer_id":49913491456167,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"276A40CN \/ 2027-06-07T09:00:00 \/ Ottawa","offer_id":50805520728231,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"276C12US \/ 2027-06-07T09:00:00 \/ Aurora","offer_id":50805520892071,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"276C13US \/ 2027-06-21T09:00:00 \/ Herndon","offer_id":50897825038503,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"277A40CN \/ 2027-07-19T09:00:00 \/ Toronto","offer_id":51258024853671,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"277B65US \/ 2027-07-12T09:00:00 \/ Arlington","offer_id":51258024886439,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"277B66US \/ 2027-07-26T09:00:00 \/ Austin","offer_id":51258024919207,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"278A60CN \/ 2027-08-23T09:00:00 \/ Ottawa","offer_id":51258024951975,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"278B73US \/ 2027-08-09T09:00:00 \/ New York","offer_id":51258024984743,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"279B37US \/ 2027-09-13T09:00:00 \/ Herndon","offer_id":51331643998375,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"279B38US \/ 2027-09-20T09:00:00 \/ Arlington","offer_id":51358219862183,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"27AA42CN \/ 2027-10-04T09:00:00 \/ Toronto","offer_id":51457014300839,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true},{"title":"27AB84US \/ 2027-10-18T09:00:00 \/ Austin","offer_id":51541937160359,"sku":"US-2058-IL","price":2260.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0399\/2869\/2903\/products\/CISSP.jpg?v=1593556002"},{"product_id":"ec-council-certified-ciso-training-cciso-v3","title":"EC-Council Certified CISO Training CCISO v4","description":"\u003cdiv\u003e\n\u003cp\u003eThe Certified CISO (CCISO) EC-Council program is the first of its kind training and certification program aimed at producing top-level information security executives. The CCISO does not focus solely on technical knowledge but on applying information security management principles from an executive management point of view. Each segment of the program has been developed with the aspiring CISO in mind and looks to transfer the knowledge of seasoned professionals to the next generation in the most critical areas in developing and maintaining a successful information security program.\u003c\/p\u003e\r\n\u003cp\u003eU.S. DoDM 8140.03\u003cbr\u003eAPPROVED BY DEPARTMENT OF DEFENSE\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eEC-Council Certified CISO Training CCISO v4 Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eIn this CISO training, you will learn how to:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare for the CCISO exam.\u003c\/li\u003e\n\u003cli\u003eNavigate the day-to-day responsibilities of a CISO.\u003c\/li\u003e\n\u003cli\u003eConsider the technical aspects of the CISO role from an executive perspective.\u003c\/li\u003e\n\u003cli\u003ePlan security and financial strategies.\u003c\/li\u003e\n\u003cli\u003eAlign CISO tasks with business goals and risk tolerance.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003ePrerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eFive years of IS management experience in each of the 5 CCISO domains verified via the \u003ca href=\"https:\/\/ciso.eccouncil.org\/contact\/\"\u003eExam Eligibility Application\u003c\/a\u003e\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCertification Information\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eIn order to sit the exam, you must have five years of IS management experience in each of the 5 CCISO domains.\u003c\/p\u003e\n\u003cp\u003eOnce the application has been approved, instructions for purchasing a Pearson VUE voucher will be issued. Applicants who do not meet these requirements can sit for the EC-Council Information Security Manager (E|ISM) exam as part of the Associate CCISO Program.\u003c\/p\u003e\n\u003cp\u003eThis is an EC-Council certification prep course. \u003cspan\u003e\u003cstrong\u003eClick here to view more EC-Council certification prep training ›\u003c\/strong\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eCCISO Certification Course Information\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 1: Governance (Policy, Legal, and Compliance)\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eInformation Security Management Program\u003c\/li\u003e\n\u003cli\u003eDefining an Information Security Governance Program\u003c\/li\u003e\n\u003cli\u003eRegulatory and Legal Compliance\u003c\/li\u003e\n\u003cli\u003eRisk Management\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 2: IS Management Controls and Auditing Management\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eDesigning, deploying, and managing security controls\u003c\/li\u003e\n\u003cli\u003eUnderstanding security controls types and objectives\u003c\/li\u003e\n\u003cli\u003eImplementing control assurance frameworks\u003c\/li\u003e\n\u003cli\u003eUnderstanding the audit management process\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 3: Security Program Management \u0026amp; Operations\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eThe role of the CISO\u003c\/li\u003e\n\u003cli\u003eInformation Security Projects\u003c\/li\u003e\n\u003cli\u003eIntegration of security requirements into other operational processes (change management, version control, disaster recovery, etc.)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 4: Information Security Core Concepts\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAccess Controls\u003c\/li\u003e\n\u003cli\u003ePhysical Security\u003c\/li\u003e\n\u003cli\u003eDisaster Recovery and Business Continuity Planning\u003c\/li\u003e\n\u003cli\u003eNetwork Security\u003c\/li\u003e\n\u003cli\u003eThreat and Vulnerability Management\u003c\/li\u003e\n\u003cli\u003eApplication Security\u003c\/li\u003e\n\u003cli\u003eSystem Security\u003c\/li\u003e\n\u003cli\u003eEncryption\u003c\/li\u003e\n\u003cli\u003eVulnerability Assessments and Penetration Testing\u003c\/li\u003e\n\u003cli\u003eComputer Forensics and Incident Response\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 5: Strategic Planning, Finance, \u0026amp; Vendor Management\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity Strategic Planning\u003c\/li\u003e\n\u003cli\u003eAlignment with business goals and risk tolerance\u003c\/li\u003e\n\u003cli\u003eSecurity emerging trends\u003c\/li\u003e\n\u003cli\u003eKey Performance Indicators (KPI)\u003c\/li\u003e\n\u003cli\u003eFinancial Planning\u003c\/li\u003e\n\u003cli\u003eDevelopment of business cases for security\u003c\/li\u003e\n\u003cli\u003eAnalyzing, forecasting, and developing a capital expense budget\u003c\/li\u003e\n\u003cli\u003eAnalyzing, forecasting, and developing an operating expense budget\u003c\/li\u003e\n\u003cli\u003eReturn on Investment (ROI) and cost-benefit analysis\u003c\/li\u003e\n\u003cli\u003eVendor management\u003c\/li\u003e\n\u003cli\u003eIntegrating security requirements into the contractual agreement and procurement process\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e","brand":"EC-Council","offers":[{"title":"26BB78US \/ 2026-11-16T09:00:00 \/ Online","offer_id":47803724103847,"sku":"US-2026-IL","price":3296.0,"currency_code":"USD","in_stock":true},{"title":"272B14US \/ 2027-02-08T09:00:00 \/ Herndon","offer_id":47854267072679,"sku":"US-2026-IL","price":3296.0,"currency_code":"USD","in_stock":true},{"title":"275B62US \/ 2027-05-10T09:00:00 \/ Herndon","offer_id":49582793654439,"sku":"US-2026-IL","price":3296.0,"currency_code":"USD","in_stock":true},{"title":"278B28US \/ 2027-08-16T09:00:00 \/ Herndon","offer_id":51258026033319,"sku":"US-2026-IL","price":3296.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0399\/2869\/2903\/products\/CISO.png?v=1593556570"},{"product_id":"systems-security-certified-practitioner-sscp-training","title":"SSCP® Training and Certification","description":"\u003cdiv\u003e\n\u003cp\u003eThe \u003cstrong\u003eSSCP Certification Course\u003c\/strong\u003e is a comprehensive training program designed to prepare individuals to become Systems Security Certified Practitioners. The course covers the essential skills and concepts needed to pass the SSCP certification exam, which assesses the knowledge and abilities of IT professionals in the domains of systems security.\u003c\/p\u003e\r\n\u003cp\u003eWith a focus on data security and security vulnerabilities, this course covers topics such as access control, security operations, incident response, cryptography, and network security. It also delves into the security issues and solutions associated with cloud computing, hybrid clouds, and private clouds.\u003c\/p\u003e\r\n\u003cp\u003eAs companies increasingly rely on data centers, interactive application security testing (IAST), and dynamic application security testing (DAST), it is essential for professionals to have a deep understanding of software security and common vulnerabilities. With this training, IT professionals can gain the visibility and control necessary to protect their data and applications, as well as their business logic and source code.\u003c\/p\u003e\r\n\u003cp\u003eTo qualify for this course, individuals should have at least one year of full-time work experience in one of the domains covered in the SSCP exam. Upon completion of this course, individuals will be prepared to take the SSCP certification exam, which is included in the course tuition. With the knowledge gained from this training, professionals can help prevent data breaches and ensure the security of their organizations.\u003c\/p\u003e\r\n\u003cp\u003eU.S. DoDM 8140.03 APPROVED BY DEPARTMENT OF DEFENSE\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eSSCP® Training and Certification Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eIn this SSCP course, you will learn how to:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare for and pass the SSCP Exam.\u003c\/li\u003e\n\u003cli\u003eImplement authentication mechanisms.\u003c\/li\u003e\n\u003cli\u003eDocument and operate security controls.\u003c\/li\u003e\n\u003cli\u003ePerform security assessment activities.\u003c\/li\u003e\n\u003cli\u003eUnderstand security issues related to networks.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eSSCP Training Prerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eThis course is for Systems Analysts and Engineers, Security Engineers as well, Database Analysts, and other IT professionals who have a minimum of one year of full-time experience in one of the domains covered in the SSCP exam. \u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eSSCP Certification Information\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eLearning Tree can provide a voucher that allows you to take the exam at any Pearson VUE Test Center available on request.\u003cbr\u003eRequirements for certification:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eA minimum of one year of experience in one or more of the seven domains of the SSCP Common Body of Knowledge (CBK)\u003c\/li\u003e\n\u003cli\u003ePass SSCP exam\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eAttendees can self-submit our courses for the following \u003ca href=\"https:\/\/www.isc2.org\/CPE-Portal-Questions\" title=\"CPE Portal Questions | (ISC)² Home\" rel=\"nofollow noopener\" target=\"_blank\"\u003eCPE credit\u003c\/a\u003e:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eGroup A credits for attending any of our cybersecurity courses, and \u003c\/li\u003e\n\u003cli\u003eGroup B General Education credits for any other Learning Tree course they attend.\u003c\/li\u003e\n\u003cli\u003eOr ISC2 members can submit CPE credits directly to the \u003ca href=\"https:\/\/www.isc2.org\/CPE-Portal-Questions\" title=\"CPE Portal Questions | ISC2 Home\" rel=\"nofollow noopener\" target=\"_blank\"\u003eCPE portal\u003c\/a\u003e in the Members section of the \u003ca href=\"https:\/\/www.isc2.org\/Membership\" title=\"Membership | ISC2 Home\" rel=\"nofollow noopener\" target=\"_blank\"\u003eISC2 website\u003c\/a\u003e.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eThis is an ISC2 certification prep course. \u003cspan title=\"ISC2® Certification Training Courses | Learning Tree\" rel=\"follow noopener\" target=\"_blank\"\u003eClick here to view more ISC2 certification prep training ›\u003c\/span\u003e\u003c\/p\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eSSCP Training and Certification Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 1: Access Controls\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eImplement authentication mechanisms\u003c\/li\u003e\n\u003cli\u003eOperate internetwork trust architectures\u003c\/li\u003e\n\u003cli\u003eParticipate in the identity-management lifecycle\u003c\/li\u003e\n\u003cli\u003eImplement access controls\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 2: Security Operations and Administration\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eUnderstand and comply with the code of ethics\u003c\/li\u003e\n\u003cli\u003eUnderstand security concepts\u003c\/li\u003e\n\u003cli\u003eDocument and operate security controls\u003c\/li\u003e\n\u003cli\u003eParticipate in asset management\u003c\/li\u003e\n\u003cli\u003eImplement and assess compliance with controls\u003c\/li\u003e\n\u003cli\u003eParticipate in change management\u003c\/li\u003e\n\u003cli\u003eParticipate in security awareness and training\u003c\/li\u003e\n\u003cli\u003eParticipate in physical security operations\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 3: Risk Identification, Monitoring, and Analysis\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eUnderstand the risk management process\u003c\/li\u003e\n\u003cli\u003ePerform security assessment activities\u003c\/li\u003e\n\u003cli\u003eOperate and maintain monitoring systems\u003c\/li\u003e\n\u003cli\u003eAnalyze monitoring results\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 4: Incident Response and Recovery\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eParticipate in incident handling\u003c\/li\u003e\n\u003cli\u003eUnderstand and support forensic investigations\u003c\/li\u003e\n\u003cli\u003eUnderstand and support BCP and DRP\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 5: Cryptography\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eUnderstand and apply fundamental concepts of cryptography\u003c\/li\u003e\n\u003cli\u003eUnderstand the requirements for cryptography\u003c\/li\u003e\n\u003cli\u003eUnderstand and support secure protocols\u003c\/li\u003e\n\u003cli\u003eOperate and implement cryptographic systems\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 6: Networks and Communications Security\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eUnderstand security issues related to networks\u003c\/li\u003e\n\u003cli\u003eProtect telecommunications technologies\u003c\/li\u003e\n\u003cli\u003eControl network access\u003c\/li\u003e\n\u003cli\u003eManage LAN-based security\u003c\/li\u003e\n\u003cli\u003eOperate and configure network-based security devices\u003c\/li\u003e\n\u003cli\u003eImplement and operate wireless technologies\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 7: Systems and Application Security\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify and analyze malicious code and activity\u003c\/li\u003e\n\u003cli\u003eImplement and operate endpoint device security\u003c\/li\u003e\n\u003cli\u003eOperate and configure cloud security\u003c\/li\u003e\n\u003cli\u003eSecure big data systems\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e","brand":"Learning Tree","offers":[{"title":"26BC72US \/ 2026-11-02T09:00:00 \/ Online","offer_id":47803716305063,"sku":"US-2060-IL","price":2158.0,"currency_code":"USD","in_stock":true},{"title":"26CA29CN \/ 2026-12-14T09:00:00 \/ Ottawa","offer_id":47803716337831,"sku":"US-2060-IL","price":2158.0,"currency_code":"USD","in_stock":true},{"title":"273C02US \/ 2027-03-08T09:00:00 \/ Herndon","offer_id":48046697906343,"sku":"US-2060-IL","price":2158.0,"currency_code":"USD","in_stock":true},{"title":"274C10US \/ 2027-04-26T09:00:00 \/ New York","offer_id":48920365039783,"sku":"US-2060-IL","price":2158.0,"currency_code":"USD","in_stock":true},{"title":"275A29CN \/ 2027-05-17T09:00:00 \/ Ottawa","offer_id":49913496010919,"sku":"US-2060-IL","price":2158.0,"currency_code":"USD","in_stock":true},{"title":"272A60CN \/ 2027-02-01T09:00:00 \/ Ottawa","offer_id":51258025738407,"sku":"US-2060-IL","price":2158.0,"currency_code":"USD","in_stock":true},{"title":"277B67US \/ 2027-07-26T09:00:00 \/ Herndon","offer_id":51258025771175,"sku":"US-2060-IL","price":2158.0,"currency_code":"USD","in_stock":true},{"title":"278A61CN \/ 2027-08-30T09:00:00 \/ Ottawa","offer_id":51276404392103,"sku":"US-2060-IL","price":2158.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0399\/2869\/2903\/products\/SSCP.jpg?v=1593557363"},{"product_id":"certified-information-security-manager-cism-training-certification-1","title":"CISM Certified Information Security Manager","description":"\u003cdiv\u003e\n\u003cp\u003eThis four‑day exam preparation course equips learners with the essential knowledge and concepts needed to succeed on the CISM certification exam. Participants explore key domains, including Information Security Governance, Risk Management, Security Program Development, and Incident Management, strengthening their understanding of enterprise‑level security practices. Case studies and targeted practice questions reinforce learning and help participants confidently apply concepts in ways that directly support exam readiness.\u003c\/p\u003e\r\n\u003cp\u003e This course covers the four CISM domains:\u003c\/p\u003e\r\n\u003cul type=\"disc\"\u003e\r\n\u003cli\u003eInformation Security Governance\u003c\/li\u003e\r\n\u003cli\u003eInformation Security Risk Management\u003c\/li\u003e\r\n\u003cli\u003eInformation Security Program\u003c\/li\u003e\r\n\u003cli\u003eIncident Management\u003c\/li\u003e\r\n\u003c\/ul\u003e\r\n\u003cp style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"\u003eU.S. DoDM 8140.03 APPROVED BY DEPARTMENT OF DEFENSE\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eCISM Certified Information Security Manager Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eIn this course, you will:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eEstablish an information security governance framework\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eDevelop an information security strategy and business case\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eAssess threats, vulnerabilities, control deficiencies, and business impacts within the organization’s risk appetite.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eRecommend and monitor risk treatment strategies that assign ownership and reduce risk to acceptable levels.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eDevelop an information security program integrating security architecture, policies, resources, controls, and performance metrics.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eManage and evaluate program effectiveness, including control testing, security awareness, third-party security, and stakeholder reporting.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eEstablish incident management capabilities aligned with business continuity and disaster recovery requirements.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003eDirect incident response activities and use exercises and post-incident reviews to strengthen organizational resilience.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eTraining Prerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eThere are no formal prerequisites to take the CISM exam or attend a CISM preparation course. However, to earn the CISM certification, candidates must:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eHave at least five years of professional information security management experience across at least three of the four CISM domains.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCertification Information\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eThe ISACA Exam Candidate Information Guide provides valuable information regarding exam day rules and information, as well as exam dates and deadlines. You can find the most recent version at: \u003ca href=\"https:\/\/www.isaca.org\/credentialing\/exam-candidate-guides\" rel=\"follow\"\u003ehttps:\/\/www.isaca.org\/credentialing\/exam-candidate-guides\u003c\/a\u003e\u003c\/p\u003e\n\u003cp\u003e\u003c\/p\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eCISM Certified Information Security Manager Training Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003e Domain 1 - Information Security Governance \u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eDescribe the role of governance in creating value for the enterprise.\u003c\/li\u003e\n\u003cli\u003eExplain the importance of information security governance in the context of overall enterprise governance.\u003c\/li\u003e\n\u003cli\u003eIdentify the relevant legal, regulatory, and contractual requirements that impact the enterprise.\u003c\/li\u003e\n\u003cli\u003eDescribe the influence of enterprise leadership, structure, and culture on the effectiveness of an information security strategy.\u003c\/li\u003e\n\u003cli\u003eDescribe the effects of the information security strategy on enterprise risk management.\u003c\/li\u003e\n\u003cli\u003eExplain the relationship between enterprise architecture (EA) and effective enterprise governance.\u003c\/li\u003e\n\u003cli\u003eEvaluate the common frameworks and standards used to govern an information security strategy.\u003c\/li\u003e\n\u003cli\u003eExplain why metrics are critical in developing and evaluating the information security strategy\u003cb\u003e. \u003c\/b\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003e Topics:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eOrganizational Purpose and Culture\u003c\/li\u003e\n\u003cli\u003eLegal, Regulatory, and Contractual Requirements\u003c\/li\u003e\n\u003cli\u003eOrganizational Structures, Roles, and Responsibilities\u003c\/li\u003e\n\u003cli\u003eInformation Security Strategy Development\u003c\/li\u003e\n\u003cli\u003eEnterprise Architecture\u003c\/li\u003e\n\u003cli\u003eInformation Governance Frameworks and Standards\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 2 – Information Security Risk Management \u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eApply risk assessment strategies to reduce the impact of information security risk.\u003c\/li\u003e\n\u003cli\u003eAssess the types of threats faced by the enterprise.\u003c\/li\u003e\n\u003cli\u003eExplain how security control baselines affect vulnerability and control deficiency analysis.\u003c\/li\u003e\n\u003cli\u003eDifferentiate between the application of risk treatment types from an information security perspective.\u003c\/li\u003e\n\u003cli\u003eDescribe the influence of risk and control ownership on the information security program.\u003c\/li\u003e\n\u003cli\u003eOutline the process of monitoring and reporting information security risk.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e \u003cb\u003eTopics: \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eEmerging Risk and Threat Landscape\u003c\/li\u003e\n\u003cli\u003eVulnerability and Control Deficiency Analysis\u003c\/li\u003e\n\u003cli\u003eRisk Assessment and Analysis\u003c\/li\u003e\n\u003cli\u003eRisk Treatment\/Risk Response Options\u003c\/li\u003e\n\u003cli\u003eRisk and Control Ownership\u003c\/li\u003e\n\u003cli\u003eRisk Monitoring and Reporting\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 3 – Information Security Program \u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eDescribe the goals and objectives of an information security architecture.\u003c\/li\u003e\n\u003cli\u003eOutline the components and resources used to build an information security program.\u003c\/li\u003e\n\u003cli\u003eDistinguish between common information security standards and frameworks available for building an information security program.\u003c\/li\u003e\n\u003cli\u003eExplain how to align information security policies, procedures, and guidelines with the needs of the enterprise.\u003c\/li\u003e\n\u003cli\u003eDescribe the process of defining an information security program road map.\u003c\/li\u003e\n\u003cli\u003eOutline key information security program metrics used to track and report progress to senior management.\u003c\/li\u003e\n\u003cli\u003eExplain how to manage the information security program using controls.\u003c\/li\u003e\n\u003cli\u003eCreate a strategy to enhance awareness and knowledge of the information security program.\u003c\/li\u003e\n\u003cli\u003eDescribe the process of integrating the security program with IT operations and third-party providers.\u003c\/li\u003e\n\u003cli\u003eCommunicate key security program information to relevant stakeholders.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e \u003cb\u003eTopics: \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eInformation Security Architecture\u003c\/li\u003e\n\u003cli\u003eInformation Security Program Resources\u003c\/li\u003e\n\u003cli\u003eInformation Security Industry Standards and Frameworks\u003c\/li\u003e\n\u003cli\u003eInformation Security Policies, Standards, Procedures, and Guidelines\u003c\/li\u003e\n\u003cli\u003eInformation Asset Identification and Classification\u003c\/li\u003e\n\u003cli\u003eInformation Security Control Design and Selection\u003c\/li\u003e\n\u003cli\u003eInformation Security Program Metrics Development\u003c\/li\u003e\n\u003cli\u003eInformation Security Control Implementation and Integrations\u003c\/li\u003e\n\u003cli\u003eInformation Security Control Testing and Evaluation\u003c\/li\u003e\n\u003cli\u003eInformation Security Awareness and Training\u003c\/li\u003e\n\u003cli\u003eManagement of External Services\u003c\/li\u003e\n\u003cli\u003eInformation Security Program Metrics, Communications, and Reporting\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 4 – Incident Management \u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eDistinguish between incident management and incident response.\u003c\/li\u003e\n\u003cli\u003eOutline the requirements and procedures necessary to develop an incident response plan.\u003c\/li\u003e\n\u003cli\u003eExplain the relationship between business impact, continuity, and incident response.\u003c\/li\u003e\n\u003cli\u003eDescribe the processes and outcomes related to disaster recovery.\u003c\/li\u003e\n\u003cli\u003eExplain the impact of metrics and testing when evaluating the incident response plan.\u003c\/li\u003e\n\u003cli\u003eIdentify techniques used to classify or categorize incidents.\u003c\/li\u003e\n\u003cli\u003eOutline the types of roles and responsibilities required for an effective incident management and response team.\u003c\/li\u003e\n\u003cli\u003eDistinguish between the types of incident management tools and technologies available to an enterprise.\u003c\/li\u003e\n\u003cli\u003eDescribe the processes and methods used to investigate, evaluate, and contain an incident.\u003c\/li\u003e\n\u003cli\u003eIdentify the types of communications and notifications used to inform key stakeholders of incidents and tests.\u003c\/li\u003e\n\u003cli\u003eOutline the processes and procedures used to eradicate and recover from incidents.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e \u003cb\u003eTopics: \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eIncident Response Plan\u003c\/li\u003e\n\u003cli\u003eBusiness Impact Analysis (BIA)\u003c\/li\u003e\n\u003cli\u003eBusiness Continuity Plan (BCP)\u003c\/li\u003e\n\u003cli\u003eDisaster Recovery Plan (DRP)\u003c\/li\u003e\n\u003cli\u003eIncident Classification\/Categorization\u003c\/li\u003e\n\u003cli\u003eIncident Management Training, Testing, and Evaluation\u003c\/li\u003e\n\u003cli\u003eIncident Management Tools and Techniques\u003c\/li\u003e\n\u003cli\u003eIncident Investigation and Evaluation\u003c\/li\u003e\n\u003cli\u003eIncident Containment Methods\u003c\/li\u003e\n\u003cli\u003eIncident Response Communications\u003c\/li\u003e\n\u003cli\u003eIncident Eradication and Recovery\u003c\/li\u003e\n\u003cli\u003ePost-incident Review Practices\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e","brand":"Learning Tree","offers":[{"title":"26AA06CN \/ 2026-10-20T09:00:00 \/ Online","offer_id":47803705360551,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"26BC03US \/ 2026-11-17T09:00:00 \/ Online","offer_id":47803705491623,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"26CB38US \/ 2026-12-01T09:00:00 \/ Online","offer_id":47803705524391,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"26CB39US \/ 2026-12-08T09:00:00 \/ Austin","offer_id":47803705557159,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"26CB40US \/ 2026-12-15T09:00:00 \/ New York","offer_id":47803705589927,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"271A10CN \/ 2027-01-12T09:00:00 \/ Ottawa","offer_id":47803705622695,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"272A08CN \/ 2027-02-02T09:00:00 \/ Toronto","offer_id":47803705688231,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"272B31US \/ 2027-02-16T09:00:00 \/ Herndon","offer_id":47909991940263,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"273B55US \/ 2027-03-16T09:00:00 \/ New York","offer_id":48126825529511,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"275B82US \/ 2027-05-04T09:00:00 \/ Bellevue","offer_id":49305072042151,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"275B84US \/ 2027-05-25T09:00:00 \/ Austin","offer_id":50233602244775,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"276B72US \/ 2027-06-14T09:00:00 \/ Aurora","offer_id":50878464753831,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"276A11CN \/ 2027-06-22T09:00:00 \/ Ottawa","offer_id":50899752550567,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"278A55CN \/ 2027-08-17T09:00:00 \/ Toronto","offer_id":51258025410727,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"279B13US \/ 2027-09-07T09:00:00 \/ Herndon","offer_id":51304434892967,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"279B14US \/ 2027-09-21T09:00:00 \/ Austin","offer_id":51360266420391,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"27AB51US \/ 2027-10-12T09:00:00 \/ San Francisco","offer_id":51496219967655,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"27AB52US \/ 2027-10-19T09:00:00 \/ New York","offer_id":51546982875303,"sku":"US-2036-IL","price":1570.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0399\/2869\/2903\/products\/CISM.jpg?v=1593554720"},{"product_id":"certified-information-systems-auditor-cisa-training","title":"Certified Information Systems Auditor (CISA) Training","description":"\u003cdiv\u003e\n\u003cp\u003eAn \u003cabbr title=\"Information Systems Audit and Control Association\"\u003eISACA\u003c\/abbr\u003e \u003cabbr title=\"Certified Information Systems Auditor\"\u003eCISA\u003c\/abbr\u003e (Certified Information Systems Auditor) is recognized as one of the leading authorities in the areas of IS (Information Systems) auditing, control, and information security. This official \u003cstrong\u003eCISA training\u003c\/strong\u003e course provides in-depth coverage of the five CISA domains covered on the CISA certification exam. These domains include Information System Auditing, governance and management of IT; information systems acquisition, development, and implementation; information systems operations and business resilience; and protection of information assets.\u003c\/p\u003e\r\n\u003cp\u003eU.S. DoDM 8140.03 APPROVED BY DEPARTMENT OF DEFENSE\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eCertified Information Systems Auditor (CISA) Training Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eIn this CISA training, you will: \u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare for the Certified Information Systems Auditor (CISA) Exam. \u003c\/li\u003e\n\u003cli\u003eDevelop and implement a risk-based IT audit strategy in compliance with IT audit standards. \u003c\/li\u003e\n\u003cli\u003eEvaluate the effectiveness of an IT governance structure. \u003c\/li\u003e\n\u003cli\u003eEnsure that the IT organizational structure and human resources (personnel) management support the organization’s strategies and objectives. \u003c\/li\u003e\n\u003cli\u003eReview the information security policies, standards, and procedures for completeness and alignment with generally accepted practices. \u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCertified Information Systems Auditor (CISA) Training Course Prerequisites \u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eIT professionals must have 5 years or more of IS audit, control, assurance, and security experience.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCertified Information Systems Auditor (CISA) Certification Exam Information \u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eThis ISACA certification prep course is specifically designed for experienced information security professionals who are preparing to take the ISACA CISA exam. \u003cspan title=\"ISACA Certification Training | Learning Tree\" rel=\"follow noopener\" target=\"_blank\"\u003e\u003cstrong\u003eClick here to view more ISACA certification prep training ›\u003c\/strong\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eCISA Training Learning Objectives:\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 1 - Information System Auditing Process\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003ePlan an audit to determine whether information systems are protected, controlled, and provide value to the enterprise.\u003c\/li\u003e\n\u003cli\u003eConduct an audit following IS audit standards and a risk-based IS audit strategy.\u003c\/li\u003e\n\u003cli\u003eCommunicate audit progress, findings, results, and recommendations to stakeholders.\u003c\/li\u003e\n\u003cli\u003eConduct audit follow-up to evaluate whether risks have been sufficiently addressed.\u003c\/li\u003e\n\u003cli\u003eEvaluate IT management and monitoring of controls.\u003c\/li\u003e\n\u003cli\u003eUtilize data analytics tools to streamline audit processes.\u003c\/li\u003e\n\u003cli\u003eProvide consulting services and guidance to the enterprise to improve the quality and control of information systems.\u003c\/li\u003e\n\u003cli\u003eIdentify opportunities for process improvement in the enterprise's IT policies and practices.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eTopics: \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eIS Audit Standards, Guidelines, Functions, and Codes of Ethics\u003c\/li\u003e\n\u003cli\u003eTypes of Audits, Assessments, and Reviews\u003c\/li\u003e\n\u003cli\u003eRisk-based Audit Planning\u003c\/li\u003e\n\u003cli\u003eTypes of Controls and Considerations\u003c\/li\u003e\n\u003cli\u003eAudit Project Management\u003c\/li\u003e\n\u003cli\u003eAudit Testing and Sampling Methodology\u003c\/li\u003e\n\u003cli\u003eAudit Evidence Collection Techniques\u003c\/li\u003e\n\u003cli\u003eAudit Data Analytics\u003c\/li\u003e\n\u003cli\u003eReporting and Communication Techniques\u003c\/li\u003e\n\u003cli\u003eQuality Assurance and Improvement of Audit Process\u003cb\u003e\u003c\/b\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 2 – Governance and Management of IT\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eEvaluate the IT strategy for alignment with the enterprise’s strategies and objectives.\u003c\/li\u003e\n\u003cli\u003eEvaluate the effectiveness of IT governance structure and IT organizational structure.\u003c\/li\u003e\n\u003cli\u003eEvaluate the enterprise’s management of IT policies and practices.\u003c\/li\u003e\n\u003cli\u003eEvaluate the enterprise’s IT policies and practices for compliance with regulatory and legal requirements.\u003c\/li\u003e\n\u003cli\u003eEvaluate IT resource and portfolio management for alignment with the enterprise’s strategies and objectives.\u003c\/li\u003e\n\u003cli\u003eEvaluate the enterprise’s risk management policies and practices.\u003c\/li\u003e\n\u003cli\u003eEvaluate IT management and monitoring of controls.\u003c\/li\u003e\n\u003cli\u003eEvaluate the monitoring and reporting of IT key performance indicators (KPIs).\u003c\/li\u003e\n\u003cli\u003eEvaluate whether IT supplier selection and contract management processes align with business requirements.\u003c\/li\u003e\n\u003cli\u003eEvaluate whether IT service management practices align with business requirements.\u003c\/li\u003e\n\u003cli\u003eConduct periodic reviews of information systems and enterprise architecture. Evaluate data governance policies and practices.\u003c\/li\u003e\n\u003cli\u003eEvaluate the information security program to determine its effectiveness and alignment with the enterprise’s strategies and objectives.\u003c\/li\u003e\n\u003cli\u003eEvaluate potential opportunities and threats associated with emerging technologies, regulations, and industry practices.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eTopics \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eLaws, Regulations, and Industry Standards\u003c\/li\u003e\n\u003cli\u003eOrganizational Structure, IT Governance, and IT Strategy\u003c\/li\u003e\n\u003cli\u003eIT Policies, Standards, Procedures, and Guidelines\u003c\/li\u003e\n\u003cli\u003eEnterprise Architecture and Considerations\u003c\/li\u003e\n\u003cli\u003eEnterprise Risk Management (ERM)\u003c\/li\u003e\n\u003cli\u003ePrivacy Program and Principles \u003c\/li\u003e\n\u003cli\u003eData Governance and Classification\u003c\/li\u003e\n\u003cli\u003eIT Resource Management\u003c\/li\u003e\n\u003cli\u003eIT Vendor Management\u003c\/li\u003e\n\u003cli\u003eIT Performance Monitoring and Reporting\u003c\/li\u003e\n\u003cli\u003eQuality Assurance and Quality Management of IT\u003cb\u003e\u003c\/b\u003e\u003cb\u003e\u003c\/b\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 3 – Information Systems Acquisition, Development, and Implementation\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eEvaluate whether the business case for proposed information system changes meets business objectives.\u003c\/li\u003e\n\u003cli\u003eEvaluate the enterprise's project management policies and practices.\u003c\/li\u003e\n\u003cli\u003eEvaluate controls at all stages of the information systems development lifecycle.\u003c\/li\u003e\n\u003cli\u003eEvaluate the readiness of information systems for implementation and migration into production. • Conduct a post-implementation review of systems to determine whether project deliverables, controls, and requirements are met.\u003c\/li\u003e\n\u003cli\u003eEvaluate change, configuration, release, and patch management policies and practices.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eTopics: \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eProject Governance and Management\u003c\/li\u003e\n\u003cli\u003eBusiness Case and Feasibility Analysis\u003c\/li\u003e\n\u003cli\u003eSystem Development Methodologies\u003c\/li\u003e\n\u003cli\u003eControl Identification and Design\u003c\/li\u003e\n\u003cli\u003eSystem Readiness and Implementation Testing\u003c\/li\u003e\n\u003cli\u003eImplementation Configuration and Release Management\u003c\/li\u003e\n\u003cli\u003eSystem Migration, Infrastructure Deployment, and Data Conversion\u003c\/li\u003e\n\u003cli\u003ePostimplementation Review\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 4 – Information Systems Operations and Business Resilience\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eEvaluate the enterprise’s ability to continue business operations.\u003c\/li\u003e\n\u003cli\u003eEvaluate whether IT service management practices align with business requirements.\u003c\/li\u003e\n\u003cli\u003eConduct periodic reviews of information systems and enterprise architecture.\u003c\/li\u003e\n\u003cli\u003eEvaluate IT operations to determine whether they are controlled effectively and continue to support the enterprise’s objectives.\u003c\/li\u003e\n\u003cli\u003eEvaluate IT maintenance practices to determine whether they are controlled effectively and continue to support the enterprise’s objectives.\u003c\/li\u003e\n\u003cli\u003eEvaluate database management practices.\u003c\/li\u003e\n\u003cli\u003eEvaluate data governance policies and practices.\u003c\/li\u003e\n\u003cli\u003eEvaluate problem and incident management policies and practices.\u003c\/li\u003e\n\u003cli\u003eEvaluate change, configuration, release, and patch management policies and practices.\u003c\/li\u003e\n\u003cli\u003eEvaluate end-user computing to determine whether the processes are effectively controlled.\u003c\/li\u003e\n\u003cli\u003eEvaluate policies and practices related to asset lifecycle management.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eTopics: \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eIT Components\u003c\/li\u003e\n\u003cli\u003eIT Asset Management\u003c\/li\u003e\n\u003cli\u003eJob Scheduling and Production Process Automation\u003c\/li\u003e\n\u003cli\u003eSystem Interfaces\u003c\/li\u003e\n\u003cli\u003eEnd-user Computing and Shadow IT\u003c\/li\u003e\n\u003cli\u003eSystems Availability and Capacity Management\u003c\/li\u003e\n\u003cli\u003eProblem and Incident Management\u003c\/li\u003e\n\u003cli\u003eIT Change, Configuration, and Patch Management\u003c\/li\u003e\n\u003cli\u003eOperational Log Management\u003c\/li\u003e\n\u003cli\u003eIT Service Level Management\u003c\/li\u003e\n\u003cli\u003eDatabase Management\u003c\/li\u003e\n\u003cli\u003eBusiness Impact Analysis\u003c\/li\u003e\n\u003cli\u003eSystem and Operational Resilience\u003c\/li\u003e\n\u003cli\u003eData Backup, Storage, and Restoration\u003c\/li\u003e\n\u003cli\u003eBusiness Continuity Plan\u003c\/li\u003e\n\u003cli\u003eDisaster Recovery Plans\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 5 – Protection of Information Assets\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eConduct audits by IS audit standards and a risk-based IS audit strategy.\u003c\/li\u003e\n\u003cli\u003eEvaluate problem and incident management policies and practices.\u003c\/li\u003e\n\u003cli\u003eEvaluate the enterprise's information security and privacy policies and practices.\u003c\/li\u003e\n\u003cli\u003eEvaluate physical and environmental controls to determine whether information assets are adequately safeguarded.\u003c\/li\u003e\n\u003cli\u003eEvaluate logical security controls to verify information confidentiality, integrity, and availability.\u003c\/li\u003e\n\u003cli\u003eEvaluate data classification practices for alignment with the enterprise’s policies and applicable external requirements.\u003c\/li\u003e\n\u003cli\u003eEvaluate policies and practices related to asset lifecycle management.\u003c\/li\u003e\n\u003cli\u003eEvaluate the information security program to determine its effectiveness and alignment with the enterprise’s strategies and objectives.\u003c\/li\u003e\n\u003cli\u003ePerform technical security testing to identify potential threats and vulnerabilities.\u003c\/li\u003e\n\u003cli\u003eEvaluate potential opportunities and threats associated with emerging technologies, regulations, and industry practices.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eTopics: \u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eInformation Asset Security Policies, Frameworks, Standards, and Guidelines\u003c\/li\u003e\n\u003cli\u003ePhysical and Environmental Controls\u003c\/li\u003e\n\u003cli\u003eIdentity and Access Management\u003c\/li\u003e\n\u003cli\u003eNetwork and End-Point Security\u003c\/li\u003e\n\u003cli\u003eData Loss Prevention\u003c\/li\u003e\n\u003cli\u003eData Encryption\u003c\/li\u003e\n\u003cli\u003ePublic Key Infrastructure (PKI)\u003c\/li\u003e\n\u003cli\u003eCloud and Virtualized Environments\u003c\/li\u003e\n\u003cli\u003eMobile, Wireless, and Internet-of-Things Devices\u003c\/li\u003e\n\u003cli\u003eSecurity Awareness Training and Programs\u003c\/li\u003e\n\u003cli\u003eInformation System Attack Methods and Techniques\u003c\/li\u003e\n\u003cli\u003eSecurity Testing Tools and Techniques\u003c\/li\u003e\n\u003cli\u003eSecurity Monitoring Logs, Tools, and Techniques\u003c\/li\u003e\n\u003cli\u003eSecurity Incident Response Management\u003c\/li\u003e\n\u003cli\u003eEvidence Collection and Forensics CISA Exam Preparation\u003c\/li\u003e\n\u003cli\u003eCISA Exam Rules • Exam Tips • Day of the Exam • CISA Certification Step\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e","brand":"Learning Tree","offers":[{"title":"26BC27US \/ 2026-11-17T09:00:00 \/ Online","offer_id":47803711783079,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"26CB50US \/ 2026-12-01T09:00:00 \/ Online","offer_id":47803711815847,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"26CB51US \/ 2026-12-08T09:00:00 \/ Online","offer_id":47803711848615,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"26CB52US \/ 2026-12-15T09:00:00 \/ Austin","offer_id":47803711881383,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"271A31CN \/ 2027-01-05T09:00:00 \/ Toronto","offer_id":47803711914151,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"272A26CN \/ 2027-02-02T09:00:00 \/ Ottawa","offer_id":47803711946919,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"273B69US \/ 2027-03-30T09:00:00 \/ Bellevue","offer_id":48274541805735,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"274B65US \/ 2027-04-20T09:00:00 \/ New York","offer_id":48662179741863,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"275C07US \/ 2027-05-11T09:00:00 \/ Herndon","offer_id":49630919622823,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"275C08US \/ 2027-05-25T09:00:00 \/ Austin","offer_id":50233600114855,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"276B90US \/ 2027-06-01T09:00:00 \/ Aurora","offer_id":50562834858151,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"276A36CN \/ 2027-06-08T09:00:00 \/ Toronto","offer_id":50828284985511,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"277A39CN \/ 2027-07-06T09:00:00 \/ Ottawa","offer_id":51258025083047,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"278B56US \/ 2027-08-24T09:00:00 \/ New York","offer_id":51258025115815,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"279B23US \/ 2027-09-14T09:00:00 \/ Herndon","offer_id":51333431885991,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"27AB61US \/ 2027-10-12T09:00:00 \/ Austin","offer_id":51496220065959,"sku":"US-2040-IL","price":1570.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0399\/2869\/2903\/products\/cisa.png?v=1593554079"},{"product_id":"certified-risk-and-information-systems-control-crisc-training","title":"Certified Risk and Information Systems Control (CRISC) Training","description":"\u003cdiv\u003e\n\u003cp\u003eThis official ISACA \u003cstrong\u003eCRISC training\u003c\/strong\u003e provides you with in-depth coverage on the four CRISC domains: risk identification; IT risk assessment; risk response and mitigation; risk and control monitoring and reporting.\u003c\/p\u003e\r\n\u003cp\u003eIT and enterprise risk management is key to an organization’s operations and strategy. If you are an Information Technology professional, risk and control professional, business analyst, project manager or compliance professional, this Certified Risk and Information Systems Control training course will teach you to defend, protect and future-proof your enterprise.\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eCertified Risk and Information Systems Control (CRISC) Training Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eIn this course, you will:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare for and pass the Certified Risk and Information System Controls (CRISC) exam.\u003c\/li\u003e\n\u003cli\u003eIdentify the universe of IT risk to contribute to the execution of the IT risk management strategy.\u003c\/li\u003e\n\u003cli\u003eAnalyze and evaluate IT risk to determine the likelihood and impact on business objectives.\u003c\/li\u003e\n\u003cli\u003eDetermine risk response options and evaluate their efficiency and effectiveness to manage risk.\u003c\/li\u003e\n\u003cli\u003eContinuously monitor and report on IT risk and controls.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eTraining Prerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eTo earn CRISC certification, you must pass the CRISC exam and show three years experience in the fields of risk management and IS control, per ISACA's requirements.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCertification Information\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eThis is an ISACA certification prep course. \u003cspan title=\"ISACA Certification Training Courses | Learning Tree\" rel=\"follow\"\u003eClick here to view more ISACA certification prep training ›\u003c\/span\u003e\u003c\/p\u003e\n\u003cp\u003eThe \u003ca href=\"https:\/\/www.isaca.org\/-\/media\/files\/isacadp\/project\/isaca\/certification\/exam-candidate-guides\/2022\/exam-candidate-guide.pdf\" title=\"PDF Exam Candidate Guide | ISACA\" rel=\"nofollow noopener\" target=\"_blank\"\u003eISACA Exam Candidate Information Guide\u003c\/a\u003e provides valuable information regarding exam day rules and information as well as exam dates and deadlines. \u003c\/p\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eCRISC Training Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 1 — IT Risk Identification\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003e1.1: Collect and review information, including existing documentation, regarding the organization’s internal and external business and IT environments to identify potential or realized impacts of IT risk to the organization’s business objectives and operations.\u003c\/li\u003e\n\u003cli\u003e1.2: Identify potential threats and vulnerabilities to the organization’s people, processes and technology to enable IT risk analysis.\u003c\/li\u003e\n\u003cli\u003e1.3: Develop a comprehensive set of IT risk scenarios based on available information to determine the potential impact to business objectives and operations.\u003c\/li\u003e\n\u003cli\u003e1.4: Identify key stakeholders for IT risk scenarios to help establish accountability.\u003c\/li\u003e\n\u003cli\u003e1.5: Establish an IT risk register to help ensure that identified IT risk scenarios are accounted for and incorporated into the enterprise-wide risk profile.\u003c\/li\u003e\n\u003cli\u003e1.6: Identify risk appetite and tolerance defined by senior leadership and key stakeholders to ensure alignment with business objectives.\u003c\/li\u003e\n\u003cli\u003e1.7: Collaborate in the development of a risk awareness program, and conduct training to ensure that stakeholders understand risk and to promote a risk-aware culture.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 2 — IT Risk Assessment\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003e2.1: Analyze risk scenarios based on organizational criteria (e.g., organizational structure, policies, standards, technology, architecture, controls) to determine the likelihood and impact of an identified risk.\u003c\/li\u003e\n\u003cli\u003e2.2: Identify the current state of existing controls and evaluate their effectiveness for IT risk mitigation.\u003c\/li\u003e\n\u003cli\u003e2.3: Review the results of risk and control analysis to assess any gaps between current and desired states of the IT risk environment.\u003c\/li\u003e\n\u003cli\u003e2.4: Ensure that risk ownership is assigned at the appropriate level to establish clear lines of accountability.\u003c\/li\u003e\n\u003cli\u003e2.5: Communicate the results of risk assessments to senior management and appropriate stakeholders to enable risk-based decision making.\u003c\/li\u003e\n\u003cli\u003e2.6: Update the risk register with the results of the risk assessment.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 3 — Risk Response and Mitigation\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003e3.1: Consult with risk owners to select and align recommended risk responses with business objectives and enable informed risk decisions.\u003c\/li\u003e\n\u003cli\u003e3.2: Consult with, or assist, risk owners on the development of risk action plans to ensure that plans include key elements (e.g., response, cost, target date).\u003c\/li\u003e\n\u003cli\u003e3.3: Consult on the design and implementation or adjustment of mitigating controls to ensure that the risk is managed to an acceptable level.\u003c\/li\u003e\n\u003cli\u003e3.4: Ensure that control ownership is assigned to establish clear lines of accountability.\u003c\/li\u003e\n\u003cli\u003e3.5: Assist control owners in developing control procedures and documentation to enable efficient and effective control execution.\u003c\/li\u003e\n\u003cli\u003e3.6: Update the risk register to reflect changes in risk and management’s risk response.\u003c\/li\u003e\n\u003cli\u003e3.7: Validate that risk responses have been executed according to the risk action plans.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 4 — Risk and Control Monitoring and Reporting\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003e4.1: Define and establish key risk indicators (KRIs) and thresholds based on available data, to enable monitoring of changes in risk.\u003c\/li\u003e\n\u003cli\u003e4.2: Monitor and analyze key risk indicators (KRIs) to identify changes or trends in the IT risk profile.\u003c\/li\u003e\n\u003cli\u003e4.3: Report on changes or trends related to the IT risk profile to assist management and relevant stakeholders in decision making.\u003c\/li\u003e\n\u003cli\u003e4.4: Facilitate the identification of metrics and key performance indicators (KPIs) to enable the measurement of control performance.\u003c\/li\u003e\n\u003cli\u003e4.5: Monitor and analyze key performance indicators (KPIs) to identify changes or trends related to the control environment and determine the efficiency and effectiveness of controls.\u003c\/li\u003e\n\u003cli\u003e4.6: Review the results of control assessments to determine the effectiveness of the control environment.\u003c\/li\u003e\n\u003cli\u003e4.7: Report on the performance of, changes to, or trends in the overall risk profile and control environment to relevant stakeholders to enable decision making.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e","brand":"Learning Tree","offers":[{"title":"26AB67US \/ 2026-10-27T09:00:00 \/ Online","offer_id":47803706048679,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"26BA33CN \/ 2026-11-17T09:00:00 \/ Online","offer_id":47803706081447,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"26CB47US \/ 2026-12-08T09:00:00 \/ Austin","offer_id":47803706146983,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"271A30CN \/ 2027-01-12T09:00:00 \/ Toronto","offer_id":47803706212519,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"271C15US \/ 2027-01-05T09:00:00 \/ New York","offer_id":47803706245287,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"272A25CN \/ 2027-02-09T09:00:00 \/ Ottawa","offer_id":47861772255399,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"273B66US \/ 2027-03-02T09:00:00 \/ Austin","offer_id":48003282567335,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"274B62US \/ 2027-04-13T09:00:00 \/ Herndon","offer_id":48393463431335,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"276B88US \/ 2027-06-14T09:00:00 \/ New York","offer_id":50878464917671,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"277B29US \/ 2027-07-20T09:00:00 \/ Herndon","offer_id":51258025017511,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"278A56CN \/ 2027-08-17T09:00:00 \/ Ottawa","offer_id":51258025050279,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true},{"title":"279B15US \/ 2027-09-07T09:00:00 \/ Austin","offer_id":51304434860199,"sku":"US-2037-IL","price":1570.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0399\/2869\/2903\/products\/CRISC.png?v=1593554371"},{"product_id":"cgrc®-training-and-certification-1","title":"CGRC® Training and Certification","description":"\u003cdiv\u003e\n\u003cp\u003eA professional earning the Certified in Governance, Risk and Compliance (CGRC®) is an information security practitioner who advocates for security risk management in pursuit of information system authorization to support an organization’s mission and operations in accordance with legal and regulatory requirements.\u003c\/p\u003e\r\n\u003cp\u003eU.S. DoDM 8140.03 APPROVED BY DEPARTMENT OF DEFENSE\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eCGRC® Training and Certification Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eIn this CGRC Certification and Training, you will learn how to:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eInformation Security Risk Management Program\u003c\/li\u003e\n\u003cli\u003eScope of the Information System\u003c\/li\u003e\n\u003cli\u003eSelection and Approval of Security and Privacy Controls\u003c\/li\u003e\n\u003cli\u003eImplementation of Security and Privacy Controls\u003c\/li\u003e\n\u003cli\u003eAssessment\/Audit of Security and Privacy Controls\u003c\/li\u003e\n\u003cli\u003eAuthorization\/Approval of Information System\u003c\/li\u003e\n\u003cli\u003eContinuous Monitoring\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCGRC Training Prerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eTo qualify for the CGRC certification, you must have a minimum of two years of cumulative, paid, full-time work experience in one or more of the seven domains of the CGRC Common Body of Knowledge (CBK).\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCGRC Certification Information\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eTo maintain certification, you must:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eEarn and post a minimum of 20 ISC2 \u003cstrong\u003e\u003cabbr title=\"Continuing Professional Education\"\u003eCPE\u003c\/abbr\u003e credits per year\u003c\/strong\u003e\n\u003c\/li\u003e\n\u003cli\u003eComply with ISC2's Code of Professional Ethics\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eAttendees can self-submit our courses for the following \u003ca href=\"https:\/\/www.isc2.org\/CPE-Portal-Questions\" title=\"CPE Portal Questions | (ISC)² Home\" rel=\"nofollow noopener\" target=\"_blank\"\u003eCPE credit\u003c\/a\u003e:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eGroup A credits \u003c\/strong\u003efor attending any of our cybersecurity courses, and\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eGroup B General Education credits \u003c\/strong\u003efor any other Learning Tree course they attend.\u003c\/li\u003e\n\u003cli\u003eOr ISC2 members can submit CPE credits directly to the \u003ca href=\"https:\/\/www.isc2.org\/CPE-Portal-Questions\" title=\"CPE Portal Questions | ISC2\" target=\"_blank\" rel=\"nofollow noopener\"\u003eCPE portal\u003c\/a\u003e in the Members section of the \u003ca href=\"https:\/\/www.isc2.org\/\" title=\"Cybersecurity and IT Security Certifications and Training | ISC2\" target=\"_blank\" rel=\"nofollow noopener\"\u003eISC2 website\u003c\/a\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eCGRC Training and Certification Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 1: Information Security Risk Management Program\u003c\/h4\u003e\n\u003cp\u003e1.1 - Understand the foundation of an organization's information security risk management program\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrinciples of information security\u003c\/li\u003e\n\u003cli\u003eRisk management frameworks (e.g., National Institute of Standards and Technology (NIST), cyber security framework, Control Objectives for Information and Related Technology (COBIT), International Organization for Standardization (ISO) 27001, International Organization for Standardization (ISO) 31000)\u003c\/li\u003e\n\u003cli\u003eSystem Development Life Cycle (SDLC)\u003c\/li\u003e\n\u003cli\u003eInformation system boundary requirements\u003c\/li\u003e\n\u003cli\u003eSecurity controls and practices\u003c\/li\u003e\n\u003cli\u003eRoles and responsibilities in the authorization\/approval process\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e1.2 - Understand the risk management program process\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eSelect program management controls\u003c\/li\u003e\n\u003cli\u003ePrivacy requirements\u003c\/li\u003e\n\u003cli\u003eDetermine third-party hosted information systems\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e1.3 - Understand regulatory and legal requirements\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eFamiliarize with governmental, organizational and international regulatory security and privacy requirements (e.g., International Organization for Standardization (ISO) 27001, Federal Information Security Modernization Act (FISMA), Federal Risk and Authorization Management Program (FedRAMP), General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPAA))\u003c\/li\u003e\n\u003cli\u003eFamiliarize with other applicable security-related mandates\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 2: Scope of the Information System\u003c\/h4\u003e\n\u003cp\u003e2.1 - Define the information system\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDetermine the scope of the information system\u003c\/li\u003e\n\u003cli\u003eDescribe the architecture (e.g., data flow, internal and external interconnections)\u003c\/li\u003e\n\u003cli\u003eDescribe the information system's purpose and functionality\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e2.2 - Determine the categorization of the information system\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify the information types processed, stored or transmitted by the information system\u003c\/li\u003e\n\u003cli\u003eDetermine the impact level on confidentiality, integrity, and availability for each information type (e.g., Federal Information Processing Standards (FIPS) 199, International Organization for Standardization\/International Electrotechnical Commission (ISO\/IEC) 27002, data protection impact assessment)\u003c\/li\u003e\n\u003cli\u003eDetermine information system categorization and document results\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 3: Selection and Approval of Security and Privacy Controls\u003c\/h4\u003e\n\u003cp\u003e3.1 - Identify and document baseline and inherited controls\u003c\/p\u003e\n\u003cp\u003e3.2 - Select and tailor controls to the system\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDetermine the applicability of recommended baseline and inherited controls\u003c\/li\u003e\n\u003cli\u003eDetermine appropriate use of control enhancements (e.g., security practices, overlays, countermeasures)\u003c\/li\u003e\n\u003cli\u003eDocument control applicability\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e3.3 - Develop continuous control monitoring strategy (e.g., implementation, timeline, effectiveness)\u003c\/p\u003e\n\u003cp\u003e3.4 - Review and approve security plan\/Information Security Management System (ISMS)\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 4: Implementation of Security and Privacy Controls\u003c\/h4\u003e\n\u003cp\u003e4.1 - Implement selected controls\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDetermine mandatory configuration settings and verify implementation following current industry standards (e.g., Technical Security Standard for Information Technology (TSSIT), Technical Guideline for Minimum Security Measures, United States Government Configuration Baseline (USGCB), National Institute of Standards and Technology (NIST) checklists, Security Technical Implementation Guides (STIGs), Center for Internet Security (CIS) benchmarks, General Data Protection Regulation (GDPR))\u003c\/li\u003e\n\u003cli\u003eEnsure that the implementation of controls is consistent with the organizational architecture and associated security and privacy architecture\u003c\/li\u003e\n\u003cli\u003eCoordinate implementation of inherited controls with control providers\u003c\/li\u003e\n\u003cli\u003eDetermine and implement compensating\/alternate security controls\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e4.2 - Document control implementation\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDocument inputs to the planned controls, their expected behavior and expected outputs or deviations\u003c\/li\u003e\n\u003cli\u003eVerify the documented details of the controls meet the purpose, scope and risk profile of the information system\u003c\/li\u003e\n\u003cli\u003eObtain and document implementation details from appropriate organization entities (e.g., physical security, personnel security, privacy)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 5: Assessment\/Audit of Security and Privacy Controls\u003c\/h4\u003e\n\u003cp\u003e5.1 - Prepare for assessment\/audit\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDetermine assessor\/auditor requirements\u003c\/li\u003e\n\u003cli\u003eEstablish objectives and scope\u003c\/li\u003e\n\u003cli\u003eDetermine methods and level of effort\u003c\/li\u003e\n\u003cli\u003eDetermine necessary resources and logistics\u003c\/li\u003e\n\u003cli\u003eCollect and review artifacts (e.g., previous assessments\/audits, system documentation, policies)\u003c\/li\u003e\n\u003cli\u003eFinalize the assessment\/audit plan\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e5.2 - Conduct assessment\/audit\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eCollect and document assessment\/audit evidence\u003c\/li\u003e\n\u003cli\u003eAssess\/audit implementation and validate compliance using approved assessment methods (e.g., interview, test, and examine)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e5.3 - Prepare the initial assessment\/audit report\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eAnalyze assessment\/audit results and identify vulnerabilities\u003c\/li\u003e\n\u003cli\u003ePropose remediation actions\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e5.4 - Review the initial assessment\/audit report and perform remediation actions\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDetermine risk responses\u003c\/li\u003e\n\u003cli\u003eApply remediations\u003c\/li\u003e\n\u003cli\u003eReassess and validate the remediated controls\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e5.5 - Develop final assessment\/audit report\u003c\/p\u003e\n\u003cp\u003e5.6 - Develop remediation plan\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eAnalyze identified residual vulnerabilities or deficiencies\u003c\/li\u003e\n\u003cli\u003ePrioritize responses based on risk level\u003c\/li\u003e\n\u003cli\u003eIdentify resources (e.g., financial, personnel and technical) and determine the appropriate timeframe\/schedule required to remediate deficiencies\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 6: Authorization\/Approval of Information System\u003c\/h4\u003e\n\u003cp\u003e6.1 - Compile security and privacy authorization\/approval documents\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eCompile required security and privacy documentation to support authorization\/approval decisions by the designated official\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e6.2 - Determine information system risk\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eEvaluate information system risk\u003c\/li\u003e\n\u003cli\u003eDetermine risk treatment options (i.e., accept, avoid, transfer, mitigate, share)\u003c\/li\u003e\n\u003cli\u003eDetermine residual risk\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e6.3 - Authorize\/approve information system\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDetermine terms of authorization\/approval\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eDomain 7: Continuous Monitoring\u003c\/h4\u003e\n\u003cp\u003e7.1 - Determine the impact of changes to information systems and the environment\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify potential threats and impacts to the operation of information systems and the environment\u003c\/li\u003e\n\u003cli\u003eAnalyze risk due to proposed changes accounting for organizational risk tolerance\u003c\/li\u003e\n\u003cli\u003eApprove and document proposed changes (e.g., Change Control Board (CCB), Technical Review Board)\u003c\/li\u003e\n\u003cli\u003eImplement proposed changes\u003c\/li\u003e\n\u003cli\u003eValidate changes have been correctly implemented\u003c\/li\u003e\n\u003cli\u003eEnsure change management tasks are performed\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e7.2 - Perform ongoing assessments\/audits based on organizational requirements\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eMonitor network, physical and personnel activities (e.g., unauthorized assets, personnel and related activities)\u003c\/li\u003e\n\u003cli\u003eEnsure vulnerability scanning activities are performed\u003c\/li\u003e\n\u003cli\u003eReview automated logs and alerts for anomalies (e.g., security orchestration, automation and response)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e7.3 - Review supply chain risk analysis monitoring activities (e.g., cyber threat reports, agency reports, news reports)\u003c\/p\u003e\n\u003cp\u003e7.4 - Actively participate in response planning and communication of a cyber event\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure response activities are coordinated with internal and external stakeholders\u003c\/li\u003e\n\u003cli\u003eUpdate documentation, strategies and tactics incorporating lessons learned\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e7.5 - Revise monitoring strategies based on changes to industry developments introduced through legal, regulatory, supplier, security and privacy updates\u003c\/p\u003e\n\u003cp\u003e7.6 - Keep designated officials updated about the risk posture for continuous authorization\/approval\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDetermine ongoing information system risk\u003c\/li\u003e\n\u003cli\u003eUpdate risk register, risk treatment, and remediation plan\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e7.7 - Decommission information system\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDetermine information system decommissioning requirements\u003c\/li\u003e\n\u003cli\u003eCommunicate decommissioning of information system\u003c\/li\u003e\n\u003cli\u003eRemove information system from operations\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e","brand":"Learning Tree","offers":[{"title":"26BC73US \/ 2026-11-16T09:00:00 \/ Online","offer_id":47803719844007,"sku":"US-2061-IL","price":2008.0,"currency_code":"USD","in_stock":true},{"title":"26CB81US \/ 2026-12-14T09:00:00 \/ Online","offer_id":47803719876775,"sku":"US-2061-IL","price":2008.0,"currency_code":"USD","in_stock":true},{"title":"274A32CN \/ 2027-04-05T09:00:00 \/ Ottawa","offer_id":48327092404391,"sku":"US-2061-IL","price":2008.0,"currency_code":"USD","in_stock":true},{"title":"275C53US \/ 2027-05-17T09:00:00 \/ Herndon","offer_id":49913492111527,"sku":"US-2061-IL","price":2008.0,"currency_code":"USD","in_stock":true},{"title":"272A61CN \/ 2027-02-01T09:00:00 \/ Ottawa","offer_id":51258025935015,"sku":"US-2061-IL","price":2008.0,"currency_code":"USD","in_stock":true},{"title":"273C59US \/ 2027-03-08T09:00:00 \/ Herndon","offer_id":51258025967783,"sku":"US-2061-IL","price":2008.0,"currency_code":"USD","in_stock":true},{"title":"277A41CN \/ 2027-07-26T09:00:00 \/ Ottawa","offer_id":51258026000551,"sku":"US-2061-IL","price":2008.0,"currency_code":"USD","in_stock":true},{"title":"279B39US \/ 2027-09-13T09:00:00 \/ Herndon","offer_id":51331644096679,"sku":"US-2061-IL","price":2008.0,"currency_code":"USD","in_stock":true}]}],"url":"https:\/\/dirinfosec.learningtree.com\/collections\/governance-risk-compliance.oembed","provider":"Learning Tree International","version":"1.0","type":"link"}