After this course you can treat information security as a leadership task: set governance, make risks understandable for senior management, steer a security programme and organise incident management. You will know the four CISM domains and practise the way of thinking the exam calls for. The course suits you if you are moving from a technical role into security management or already work there. The focus is on decisions and accountability, with less time on deep technical detail.
What you’ll take away.
- Set up security governance that fits the organisation’s goals
- Assess information risks and propose workable treatment options
- Plan, measure and develop a security programme
- Prepare incident management and recovery at an organisational level
Your training in detail
- Who is it for?
- Security managers, security officers and experienced IT professionals taking on leadership responsibility for information security.
- Prerequisites
- Work experience in a security role. For certification you must prove your experience in an application to ISACA, and you can take the exam beforehand.
- Format & planning
- Standard length: 4 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Information security governance
Information security risk management
Building and running a security programme
Incident management and contingency planning
Metrics and reporting for senior management
Question technique and exam revision
You build a prioritised security roadmap for a fictional company and present it as a decision paper for its management.
Exams, licences & credentials
This course prepares you for the ISACA CISM exam. The exam and its fees are included only if your offer confirms them. The certificate is issued by ISACA, not NextNowa. This is not an official ISACA course. Certification also requires an application to ISACA with evidence of your work experience.
Vendor references & review date
Sources checked on 2026-11-04. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
How is the CISM exam delivered?
ISACA delivers the computer-based exam at PSI test centres or with remote proctoring. You have six months after registering.
Does passing the exam earn the certificate?
No. You also need to prove your experience in an application to ISACA, and you have five years after passing to do so.
Does Certified Information Security Manager (CISM): leading security include a certificate?
This course prepares you for the ISACA CISM exam. The exam and its fees are included only if your offer confirms them. The certificate is issued by ISACA, not NextNowa. This is not an official ISACA course. Certification also requires an application to ISACA with evidence of your work experience.