INFORMATION TECHNOLOGY
COMPLETE GUIDE TO CISM CERTIFICATION
CONTENTS INFORMATION SECURITY GOVERNANCE FUNCTIONAL AREA OVERVIEW CISM® MAPPING INTRODUCTION DEVELOPING AN INFORMATION SECURITY STRATEGY IN SUPPORT OF BUSINESS STRATEGY AND DIRECTION OBTAIN SENIOR MANAGEMENT COMMITMENT AND SUPPORT DE?NITIONS OF ROLES AND RESPONSIBILITIES OBTAINING SENIOR MANAGEMENT COMMITMENT CHANGE IN FOCUS RESPONSIBILITIES AND FUNCTIONAL ROLES WHERE NOT TO REPORT RECOMMENDATION ESTABLISH REPORTING COMMUNICATIONS THAT SUPPORT INFORMATION SECURITY GOVERNANCE ACTIVITIES MISSION STATEMENT LEGAL AND REGULATORY ISSUES ESTABLISH AND MAINTAIN INFORMATION SECURITY POLICIES GLOBAL POLICY (TIER 1) TOPIC SCOPE RESPONSIBILITIES COMPLIANCE OR CONSEQUENCES TOPIC-SPECI?C POLICY (TIER 2) THESIS STATEMENT RELEVANCE