CUP OF CYBER - CISM Certification - Certified Information Security Manager

and we are live on Friday we have made it successfully to the end of the week [Music] [Applause] it's time to celebrate as you know on Friday we wear red so of course we're wearing red today moose saloon Kalispell Montana great place to hang out sawdust on the floor great pizza place to throw your peanuts right peanut shells right on the floor but today it's a certification day we're here to talk about arguably one of ice akas most famous most popular most requested and tested certifications the certified information security manager exam or sysm as it's called you all learn a little bit more about this exam stay tuned after the brief intro and we'll dive into this thing welcome back I got uh something in my eye this morning that's not good okay today we are here to talk about certifications because it's Friday and the sysem exam is arguably one of the most dang it one of the most popular of I Sakas examinations and certifications there's quite a few people holding this thing so let's let's after we talk about the day what day it is so February 21st it is sticky bun day herb Montana I don't know it's sticky bun is but I do know now it's kind of like a cinnamon roll so maybe even a cinnamon roll is a sticky bun maybe they are one in the same but it is sticky bun day and on sticky bun day we're going to talk about the sysm so that's that's just the way it is so the system is designed for those who manage design / CSS and enterprise information security function from our folks fine folks at I second so this is really a management level exam it's for somebody who's going to build manage and maintain an information security program for in our organization there's a number of exams things about five or six exams and certifications I saga has sisse which is a certified information security auditor and sysm same thing with a manager are the two top dogs they have C risk is coming on strong but I think it's never gonna I would seat these two so if you're looking to do management of information security if you're looking at building security programs for an organization this is the circuit certification for you it ranks kind of equal to or kind of on par with the is C squared C is SP CISSP is kind of you know where they say a mile wide and an inch deep we talk about a lot of different security topics in the CISSP the sysm on the other hand focuses very narrowly on management of a security program for an organization so that's one of the big differences we'll talk about to take the glue to get the certification need five or more experiences five or more years experience in information security management and you get waivers for maximum of two of those years generally that's things like if you have a college degree if you have a master's degree or a bachelor's degree something like that you can get some of the years of experience waived but you need to have some experience in the field costly exam I love the way I sakhaa does this they build their exams so they can get members really in my in my humble personal experience and opinion so if you're a non-member it's seven hundred and sixty dollars for the exam if you remember it's five seventy-five and memberships one hundred and thirty dollars per year so even if you sign up for one year to take the exam you're saving like like 55 bucks so oh I guess a way to get membership most people I know that take any of the Isacc exams become members because it's just cheaper and you pay that once a year so if you can do this is a-- says and says um or c risk or any of the other things that that a sac has going on you pay that one membership and it it drops the price down for everything so your as the price of the system goes down the price of this is a-- will go down as well so you know if you're gonna do is probably worth taking taking the time to become a member you have to generally become a member to get the cert anyways to maintain it so the exam itself is four hours long you need you need to take that down by minutes it's two hundred and forty minutes you'll be tasked with answering 150 multiple-choice questions or I like to say guess ABCD best guess gets it and you need a score of 450 or higher to pass the scale scale for this one like many of them is 200 to 800 points so the domains domain one is your information security governance this is really how does security tie in with your organizational goals and objectives and what kind of rules and regulations do you need to find need to follow to build your program out right domain to information risk management everything your risk management is in my opinion King today all these exams all of security always has to have today at least a risk focus so we'll make risk-based decisions so you need to know how to do risk management so 30% of the get exam will be on information risk management domain 3 information security program development and management this is building can you build an information security program for an organization hat and once you built it can you manage it and maintain it over time and then finally domain for information security incident management what do you do if there's an incident that happens at your organization do you have a program for it do you have that set up and structured and this talks about how you set that up really test you on your ability to set that up and what you need to do to have an incident management program and each of these domains leads into the next right so governance leads into risk risk leads into how do you build and maintain your security program security program leads into incident management and incident management goes back around and it reinforced your governance program do you need to change anything do you need update policies do you need are you missing something because an incident happened and you you didn't have a policy or program for it so it all cycles around it's a cyclic process for the tasks within this ism my opinion a good certification I think it correct is a good deal await in the the security in the risk environment in this field like cissp and those things it's it is 85 70 I should have had the 8570 map so we can see where this falls in they're roughly equivalent to those leadership positions you'll get with the CISSP so in the ia I am information assurance management domains generally once you get your certification you're going to have to do a minimum of 20 continuing professional education hours every year and you're gonna have to pay your your dues you also have to comply with the the ethics of the code of ethics for aisaka and just do the right thing right any of these certifications any of the the big certifications in security and risk will require you to do ethics to follow an ethical code remember security people risk people are gonna be deep into the environment that drives an organization forward you're gonna know a lot of the dirty secrets of an organization you're gonna know a lot of the skeletons in the closet you're gonna know where vulnerabilities and risks are you're gonna know where the threats are coming from you're gonna have to follow ethics do things ethically now get you a long way in this field it really will do the right thing so that's the that's the sysm exam coming to you live from cyber econ's fake server room in the back here hopefully you got good plans for the weekend we did make it to the weekend maybe it's is Friday you're gonna go out and enjoy yourself at the club do things with the family would it be a plan go do something fun this weekend hopefully you're doing well in your security your cyber career moving things forward you know like I always say we need more qualified people in the field if you're watching this video that means you're excited or amped up about doing the right thing you know if you're ready to take the system exam or you think you need to go do it let's get it done comment below let me know what you think about this ISM me your feedback about the system if you've taken the system exam or the scissor or the CISSP or any certifications in security let me know in the comments below write some comments let's talk about certification to talk about your experience in the security and cyber world where are you trying to go to what are you trying to do art and are we helping you out at all I hope we are hope hopefully you know we can do that so hit thumbs up on this one hit the bell to be notified when new content comes out hopefully you know like comment subscribe get your friends subscribe get if you know people that are there looking to go into the cyber field send them our way send them to the channels hopefully we're providing information and education that that's helping you maybe it'll help them too so as always i'm jim cyber icons channel be safe out there and we will see a Monday morning [Music]

Channel: Cyber-Recon

Views: 842

Rating: 5 out of 5

Keywords:

Id: mlOkMtmnuhs

Length: 11min 21sec (681 seconds)

Published: Fri Feb 21 2020