Learn to approach information security as a management responsibility. Follow the four CISM domains, then use the published case studies to connect governance, risk, security programs and incident decisions. What you will learn • Connect security strategy, governance and accountability to business priorities. • Assess information risk and explain control-selection decisions. • Plan and evaluate security program activities, including third-party and supply-chain risk. • Compare incident-management, recovery and resilience decisions using management scenarios. For: Security managers, team leaders, GRC professionals and practitioners preparing for greater management responsibility. Preparation: An understanding of basic information security concepts is recommended; technical implementation experience is helpful.