Udemy – CISM Certification: Domain 1 & 2 | Platinum Video Series

This course is carefully designed to guide you through Domain 1: Information Security Governance and Domain 2: Information Security Risk Management of the CISM Certification [ Certified Information Security Manager ]. These two foundational domains provide the strategic insight and risk-focused mindset essential for leading in today’s complex cybersecurity landscape.

In Domain 1 we cover:

• Key governance concepts, frameworks, and strategic alignment
• The role of executive leadership, steering committees, and security stakeholders
• How to build and manage a security strategy and governance structure
• Integration of GRC (Governance, Risk, Compliance) into security programs
• The responsibilities of security roles and effective reporting practices
• How to create a culture of security and ensure leadership oversight

In Domain 2, we focus on building a deep understanding of Information Security Risk Management and its role in protecting organizational assets.

In Domain 2 we cover:

• Core risk management concepts, including threats, vulnerabilities, and controls
• How to identify, assess, evaluate, and treat information security risks
• The risk management lifecycle and integration with enterprise risk frameworks
• Risk analysis techniques (qualitative and quantitative) and key metrics
• Security strategies such as defense in depth, zero trust, and ROSI
• Roles of stakeholders, governance structures, and senior leadership involvement
• Managing compliance, audits, incident response, and business continuity
• Key human, organizational, and cloud-related risk considerations