IT-Sicherheitsexperte mit CISM + CISA + CRISC

Diese Senior-Ausbildung kombiniert die drei meistgefragten ISACA-Zertifizierungen für IT-Security-Senior-Profis. ISACA-Zertifikate gelten als Premium-Credentials im IT-Security-Markt und werden für CISO-Rollen, Big-4-Audit-Stellen und Bank-IT-Risk-Positionen häufig vorausgesetzt. CISM Certified Information Security Manager (5 Tage): Management-Cert mit 4 Domänen — 1. Information Security Governance (17%): IS Strategy, Governance Framework, Implementation. 2. Information Risk Management (20%): Risk Identification, Analysis & Assessment, Treatment, Monitoring. 3. Information Security Program Development & Management (33%): Program Resources, Implementation, Operations, Metrics. 4. Information Security Incident Management (30%): Incident Response Planning, Detection, Containment, Recovery, BCP/DRP. Examen: 150 Fragen, 4h, Pass 450/800. CISA Certified Information Systems Auditor (5 Tage): Audit-Cert mit 5 Domänen — 1. Information System Auditing Process (21%): Audit Standards, Planning, Execution. 2. Governance & Management of IT (17%): IT Governance Frameworks COBIT/ITIL/ISO 38500, IT Strategy Alignment. 3. IS Acquisition/Development/Implementation (12%): Project Management Practices, SDLC, Application Controls. 4. IS Operations & Business Resilience (23%): IS Operations, BCM, Disaster Recovery. 5. Protection of Information Assets (27%): Information Asset Security, IAM, Network Security, Cryptography, Physical Security. Examen: 150 Fragen, 4h, Pass 450/800. CRISC Certified in Risk and Information Systems Control (5 Tage): IT-Risk-Cert mit 4 Domänen — 1. IT Risk Identification (27%): Risk-Scenarios, Frameworks (NIST RMF, ISO 31000, COSO ERM), Risk Appetite/Tolerance. 2. IT Risk Assessment (28%): Risk Analysis qualitativ/quantitativ (ALE Annual Loss Expectancy, ROSI Return on Security Investment), Methodologien (FAIR Factor Analysis of Information Risk, OCTAVE, ISO 27005). 3. Risk Response and Reporting (23%): Risk Treatment (avoid/mitigate/transfer/accept), Risk Reporting (Heat Maps, Risk Dashboards), KRI Key Risk Indicators. 4. Information Technology and Security (22%): Enterprise Architecture, Project Management, Business Continuity, Data Privacy. Examen: 150 Fragen, 4h, Pass 450/800. ISACA-Mitgliedschaft erforderlich (~125$/Jahr), 5 Jahre Berufserfahrung für Zertifikats-Award (Substitutionen möglich). Mit allen drei ISACA-Zertifikaten qualifizieren Sie sich für die höchsten IT-Security-Positionen.