Detail Sertifikasi

1. Information Security Governance
2. Information Security Governance Overview
3. Effective Information Security Governance
4. Governance and Third-Party Relationship
5. Information Security Governance Metrics
6. Information Security Strategy Overview
7. Developing an Information Security Strategy
8. Information Security Strategy OBJECTIVE
9. Determining Current State of Security
10. Information Security Strategy Development

• Strategy Resources
• Strategy Constraints
• Action Plan to Implement Strategy
• Implementing Security Governance-Example
• Action Plan Intermediate Goals
• Information Security Program OBJECTIVE
• Case Study

11. Information Risk Management and Compliance

• Risk Management Overview
• Risk Management Strategy
• Effective Information Risk Management
• Information Risk Management Concepts
• Implementing Risk Management
• Risk Assessment and Analysis Methodologies
• Risk Assessment
• Information Resource Valuation
• Recovery Time OBJECTIVE
• Integration With Life Cycle Processes
• Security Control Baselines
• Risk Monitoring and Communication
• Training and Awareness
• Documentation

12. Information Security Program Development and Management

• Information Security Program Management Overview
• Information Security Program Objective
• Information Security Program Concepts
• Scope and Character of an Information Security Program
• The Information Security Management Framework
• Information Security Framework Components
• Defining an Information Security Program Road Map
• Information Security Infrastructure and Architecture
• Architecture Implementation
• Security Program Management and Administration activities
  a. Security Program Services and Operational Activities
  b. Controls and Countermeasures
  c. Security Program Metrics and Monitoring
  d. Common Information Security Program Challenges

13. Information Security Incident Management

• Incident Management Overview
• Incident Response Procedures
• Incident Management Organization
• Incident Management Resources
• Incident Management OBJECTIVE
• Incident Management Metrics and Indicators
• Defining Incident Management Procedures
• Current State of Incident Response Capability
• Developing and Incident Response Plan
• Business Continuity and Disaster Recovery Procedures
  a. Testing Incident Response and Business Continuity/Disaster Recovery Plans
  b. Executing Response and Recovery Plans
  c. Post Incident Activities and Investigation