ISSMP Certification Details - Zetlan Technologies

1. Leadership and Business Management

Establish security’s role in organizational culture, vision and mission

Define information security program vision and mission
Align security with organizational goals, objectives and values
Define security’s relationship to the overall business processes
Define the relationship between organizational culture and security

Align security program with organizational governance

Identify and navigate organizational governance structure
Validate roles of key stakeholders
Validate sources and boundaries of authorization
Advocate and obtain organizational support for security initiatives

Define and implement information security strategies

Identify security requirements from business initiatives
Evaluate capacity and capability to implement security strategies
Manage implementation of security strategies
Review and maintain security strategies
Prescribe security architecture and engineering theories, concepts and methods

Define and maintain security policy framework Determine applicable external standards

Determine applicable external standards
Determine data classification and protection requirements
Establish internal policies
Advocate and obtain organizational support for policies
Develop procedures, standards, guidelines and baselines
Ensure periodic review of security policy framework

Manage security requirements in contracts and agreements

Evaluate service management agreements (e.g., risk, financial)
Govern managed services (e.g., infrastructure, cloud services)
Manage impact of organizational change (e.g., mergers and acquisitions, outsourcing)
Ensure that appropriate regulatory compliance statements and requirements are included in contractual agreements
Monitor and enforce compliance with contractual agreements

Manage security awareness and training programs

Promote security programs to key stakeholders
Identify needs and implement training programs by target segment
Monitor and report on effectiveness of security awareness and training programs

Define, measure and report security metrics

Identify Key Performance Indicators (KPI)
Associate Key Performance Indicators (KPI) to the risk posture of the organization
Use metrics to drive security program development and operations

Prepare, obtain and administer security budget

Prepare and secure annual budget
Adjust budget based on evolving risks and threat landscape
Manage and report financial responsibilities

Manage security programs

Define roles and responsibilities
Determine and manage team accountability
Build cross-functional relationships
Resolve conflicts between security and other stakeholders
Identify communication bottlenecks and barriers
Integrate security controls into human resources processes

Apply product development and project management principles

Incorporate security into project lifecycle
Identify and apply appropriate project management methodology
Analyze project time, scope and cost relationship

2. Systems Lifecycle Management

Manage integration of security into Systems Development Life Cycle (SDLC)

Integrate information security gates (decision points) and requirements into lifecycle
Implement security controls into system lifecycle
Oversee security configuration management (CM) processes

Integrate new business initiatives and emerging technologies into the security architecture

Integrate security into new business initiatives and emerging technologies
Address impact of new business initiatives on security posture

Define and oversee comprehensive vulnerability management programs (e.g., vulnerability scanning, penetration testing, threat analysis)

Identify, classify and prioritize assets, systems and services based on criticality to business
Prioritize threats and vulnerabilities
Manage security testing
Manage mitigation and/or remediation of vulnerabilities based on risk

Manage security aspects of change control

Integrate security requirements with change control process
Identify and coordinate with the stakeholders
Manage documentation and tracking
Ensure policy compliance (e.g., continuous monitoring)

3. Risk Management

Develop and manage a risk management program

Identify risk management program objectives
Communicate and agree on risk management objectives with risk owners and other stakeholders
Determine scope of organizational risk program
Identify organizational security risk tolerance/appetite
Obtain and verify organizational asset inventory
Analyze organizational risks
Determine countermeasures, compensating and mitigating controls
Perform cost-benefit analysis (CBA) of risk treatment options

Conduct risk assessments

Identify risk factors

Manage security risks within the supply chain (e.g., supplier, vendor, third-party risk)

Identify supply chain security risk requirements
Integrate supply chain security risks into organizational risk management
Validate security risk control within the supply chain
Monitor and review the supply chain security risks

4. Threat Intelligence and Incident Management

Establish and maintain threat intelligence program

Aggregate threat data from multiple threat intelligence sources
Conduct baseline analysis of network traffic, data and user behavior
Detect and analyze anomalous behavior patterns for potential concerns
Conduct threat modeling
Identify and categorize an attack
Correlate related security event and threat data
Create actionable alerting to appropriate resources

Establish and maintain incident handling and investigation program

Develop program documentation
Establish incident response case management process
Establish incident response team
Apply incident management methodologies
Establish and maintain incident handling process
Establish and maintain investigation process
Quantify and report financial and operational impact of incidents and investigations to stakeholders
Conduct root cause analysis (RCA)

5. Contingency Management

Facilitate development of contingency plans

Identify and analyze factors related to the Continuity of Operations Plan (COOP)
Identify and analyze factors related to the business continuity plan (BCP) (e.g., time, resources, verification)
Identify and analyze factors related to the disaster recovery plan (DRP) (e.g., time, resources, verification)
Coordinate contingency management plans with key stakeholders
Define internal and external crisis communications plans
Define and communicate contingency roles and responsibilities
Identify and analyze contingency impact on business processes and priorities
Manage third-party contingency dependencies
Prepare security management succession plan

Develop recovery strategies

Identify and analyze alternatives
Recommend and coordinate recovery strategies
Assign recovery roles and responsibilities

Maintain contingency plan, Continuity of Operations Plan (COOP), business continuity plan

Plan testing, evaluation and modification
Determine survivability and resiliency capabilities
Manage plan update process

Manage disaster response and recovery process

Declare disaster
Implement plan
Restore normal operations
Gather lessons learned
Update plan based on lessons learned

6. Law, Ethics and Security Compliance Management

Identify the impact of laws and regulations that relate to information security

Identify applicable privacy laws
Identify legal jurisdictions the organization and users operate within (e.g., trans-border data flow)
Identify export laws
Identify intellectual property (IP) laws
Identify applicable industry regulations
Identify and advise on non-compliance risks

Adhere to the (ISC)2 Code of Ethics as related to management issues
Validate compliance in accordance with applicable laws, regulations and industry best practices

Inform and advise senior management
Evaluate and select compliance framework(s)
Implement the compliance framework(s)
Define and monitor compliance metrics

Coordinate with auditors and regulators in support of the internal and external audit processes

Plan
Schedule
Coordinate audit activities
Evaluate and validate findings
Formulate response
Validate implemented mitigation and remediation actions

Document and manage compliance exceptions

Identify and document compensating controls and workarounds
Report and obtain authorized approval of risk waiver

Video Packages
Online Live Class

Fees Structure :	15500 INR / 185 USD
Total No of Class :	74 Video Class
Class Duration :	54:00 Working Hours
Download Feature :	Download Avalable
Technical Support :	Call / Whatsapp : +91 8680961847
Working Hours :	Monday to Firday 9 AM to 6 PM
Payment Mode :	Credit Card / Debit Card / NetBanking / Wallet (Gpay/Phonepay/Paytm/WhatsApp Pay)

Brochure Buy Now Sample Demo

Fees Structure :	30000 INR / 355 USD
Class Duration :	60 Days
Class Recording :	Live Class Recording available
Class Time :	Monday to Firday 1.5 hours per day / Weekend 3 Hours per day
Technical Support :	Call / Whatsapp : +91 8680961847
Working Hours :	Monday to Firday 9 AM to 6 PM
Payment Mode :	Credit Card / Debit Card / NetBanking / Wallet (Gpay/Phonepay/Paytm/WhatsApp Pay)

Download Brochure Pay Online

1. Leadership and Business Management

2. Systems Lifecycle Management

3. Risk Management

4. Threat Intelligence and Incident Management

5. Contingency Management

6. Law, Ethics and Security Compliance Management

Why People Like us!

More Info

Account

Contact