Weekend batches
October 2026
09:00–15:00 · flexible hours
$799per learner
24 Oct 2026
4 of 25 seats available
31 Oct 2026
10 of 25 seats available
IT Security and Governance
Certified Information Security Manager (CISM) in Gibraltar
CISM Certification Training in Gibraltar helps professionals build expertise in information security governance, risk management, security programs, and incident management. This CISM Course from StepMerit Learning provides structured, exam-focused learning for professionals seeking advanced cybersecurity management skills, stronger security leadership capabilities, and preparation for the Certified Information Security Manager certification from ISACA.
40 Hours / 5 DaysAdvanced4.1 · 3,000 reviews
Training calendar
Upcoming four-month course schedule
A new weekday and weekend batch starts every week. Each batch runs for 5 training days, based on the course duration of 40 Hours / 5 Days.
Weekend batches
November 2026
09:00–15:00 · flexible hours
$799per learner
07 Nov 2026
25 of 25 seats available
14 Nov 2026
25 of 25 seats available
21 Nov 2026
25 of 25 seats available
28 Nov 2026
25 of 25 seats available
Weekend batches
December 2026
09:00–15:00 · flexible hours
$799per learner
05 Dec 2026
25 of 25 seats available
12 Dec 2026
25 of 25 seats available
19 Dec 2026
25 of 25 seats available
26 Dec 2026
25 of 25 seats available
Weekend batches
January 2027
09:00–15:00 · flexible hours
$799per learner
02 Jan 2027
25 of 25 seats available
09 Jan 2027
25 of 25 seats available
16 Jan 2027
25 of 25 seats available
23 Jan 2027
25 of 25 seats available
30 Jan 2027
25 of 25 seats available
Course curriculum
What you’ll learn
40 Hours / 5 DaysAdvanced
- Module 1: Information Security Governance
- Enterprise governance, organizational culture, and security responsibilities
- Legal, regulatory, and contractual requirements
- Organizational structures, roles, responsibilities, and accountability
- Information security governance frameworks and standards
- Information security strategy development and alignment with business objectives
- Strategic planning, budgeting, resources, and business cases
- Enterprise architecture and its relationship to information security
- Stakeholder communication, leadership support, and security metrics
- Module 2: Information Security Risk Management
- Emerging cybersecurity risks and evolving threat landscapes
- Vulnerability and security control deficiency analysis
- Information security risk identification and assessment
- Risk analysis and evaluation based on organizational risk appetite
- Risk treatment and response options
- Risk ownership and control ownership
- Risk monitoring, reporting, and communication
- Integration of information security risk management with business processes
- Module 3: Information Security Program
- Information security program development and strategic alignment
- Security program resources including people, processes, tools, and technologies
- Information asset identification and classification
- Information security frameworks, standards, policies, and procedures
- Information security program metrics and performance measurement
- Security control design, selection, implementation, and integration
- Security control testing and effectiveness evaluation
- Security awareness, training, and organizational communication
- Third-party, supplier, and external service management
- Information security architecture and security requirements
- Security program reporting and continuous improvement
- Module 4: Incident Management
- Information security incident response planning
- Business Impact Analysis (BIA)
- Business Continuity Planning (BCP)
- Disaster Recovery Planning (DRP)
- Incident classification and categorization
- Incident response training, testing, and evaluation
- Incident investigation and analysis
- Incident containment, eradication, and recovery
- Incident communication, notification, escalation, and reporting
- Post-incident reviews, root-cause analysis, and lessons learned
- Continuous improvement of incident management capabilities
- Module 5: CISM Strategy and Management Scenarios
- Business-aligned information security strategy scenarios
- Enterprise risk assessment and risk treatment scenarios
- Security governance and stakeholder decision-making
- Security program development and resource management
- Security architecture and enterprise technology considerations
- Third-party and supply-chain security scenarios
- Incident response and recovery decision-making
- Management-oriented cybersecurity case studies
- Module 6: CISM Exam Preparation and Practice
- Comprehensive revision of all four CISM domains
- Scenario-based information security management questions
- Governance and security strategy practice
- Risk management and risk response practice
- Security program management assessments
- Incident management and response scenarios
- Mock tests and performance evaluation
- Exam question analysis and time-management strategies
- Identification of knowledge gaps and targeted revision
- Final CISM certification examination preparation
Entry requirements and prerequisites
- Professional Information Security Experience
CISM certification requires a minimum of 5 years of professional information security management work experience across the CISM job practice areas. The experience requirement applies to certification, although it is not required simply to sit for the CISM exam. - Information Security Management Knowledge
Basic to intermediate knowledge of information security governance, risk management, security programs, and incident management is recommended for learners joining CISM Certification Training in Gibraltar. - IT and Cybersecurity Background
A background in IT, cybersecurity, information security, risk management, compliance, or related technology functions can help learners understand the management-focused concepts covered in CISM Training in Gibraltar. - Management and Governance Awareness
Familiarity with organizational security policies, governance frameworks, risk assessment, compliance, and security strategy is beneficial for professionals preparing for CISM Certification in Gibraltar. - Incident Management Understanding
Basic awareness of incident response, business impact, recovery, and security incident management can help learners engage effectively with the CISM curriculum in Gibraltar. - No Mandatory Prerequisite to Take the Exam
ISACA states that the CISM exam is open to anyone interested in information security. Candidates who do not yet meet the experience requirement may take the exam, but they must satisfy the experience requirement before receiving the CISM certification. - Professional Learning Readiness
Learners pursuing CISM Training in Gibraltar should be prepared to study information security strategy, governance, risk management, security programs, and incident management through practical and scenario-based learning.
Career value
Reasons to choose this course
Develop Information Security Management Expertise
Build advanced knowledge of information security governance, risk management, security programs, and incident management to strengthen your professional cybersecurity capabilities.
Strengthen Security Governance Skills
Learn how to align information security strategy with organizational objectives, governance frameworks, policies, regulatory requirements, and business priorities.
Enhance Cybersecurity Risk Management Knowledge
Develop skills in risk assessment, threat and vulnerability analysis, risk treatment, control ownership, monitoring, and security risk reporting for enterprise environments.
Build Information Security Program Management Skills
Gain knowledge of developing, implementing, monitoring, and improving information security programs, including controls, resources, metrics, policies, and security awareness.
Improve Incident Management Capabilities
Learn structured approaches to incident readiness, investigation, containment, recovery, communication, business continuity, and post-incident improvement.
Prepare for Advanced Information Security Roles
Build management-focused cybersecurity knowledge relevant to information security managers, cybersecurity managers, security consultants, governance professionals, and security program leaders.
Advantages
Turn learning into practical capability
Business-Aligned Security Knowledge
Understand how information security strategy can be aligned with organizational goals, enterprise governance, business requirements, and stakeholder expectations.
Structured Risk-Based Decision Making
Develop a systematic understanding of information security risk assessment, analysis, treatment, ownership, monitoring, and reporting to support risk-informed security decisions.
Comprehensive Security Program Understanding
Explore security program development and management, including policies, procedures, controls, resources, metrics, awareness, third-party services, and security reporting.
Management-Focused Cybersecurity Learning
Build knowledge that connects cybersecurity operations with management responsibilities, strategic planning, governance, security resources, and organizational priorities.
Incident Readiness and Response Knowledge
Learn about incident response planning, business impact analysis, continuity and disaster recovery planning, incident investigation, containment, eradication, recovery, and post-incident reviews.
Current CISM Exam-Oriented Preparation
Develop structured knowledge across the CISM domains and prepare through scenario-based learning, practice questions, revision, and exam-focused activities. For exams from 3 November 2026, ISACA's updated CISM outline applies, including updated emphasis on security strategy and program development.
Exam format & assessment
- Certification: Certified Information Security Manager (CISM)
- Certification Body: ISACA
- Exam Format: Computer-based examination
- Number of Questions: 150 questions
- Exam Duration: 4 hours (240 minutes)
- Question Type: Multiple-choice questions
- Passing Score: 450 on a scaled score range of 200–800
- Exam Delivery: Authorized PSI testing centers or remotely proctored examination
- CISM Certification Experience Requirement
Passing the CISM examination alone does not automatically grant the CISM certification. ISACA requires at least five years of professional information security management experience across at least three of the four CISM domains for certification.
Bring your learning together
Course conclusion
CISM Certification Training in Gibraltar from StepMerit Learning helps professionals build advanced skills in information security governance, risk management, security program management, and incident management. The CISM course supports structured preparation for the ISACA Certified Information Security Manager certification and develops knowledge relevant to enterprise cybersecurity management, security strategy, risk-based decision-making, and information security leadership.
Target audience
- Information Security Managers
- Cybersecurity Managers and Leaders
- Information Security Governance Professionals
- Information Security Risk Management Professionals
- Information Security Program Managers
- Incident Management Professionals
- Security Strategy and Architecture Professionals
- Security Controls and Compliance Professionals
- Security Awareness and Training Professionals
- Third-Party and Supplier Security Professionals
- Experienced IT and Cybersecurity Professionals
- CISM Certification Aspirants
Verified learning evidence
Expertise, recognition and learner outcomes
Course-specific expertise
- 10+ Years of Information Security & Management Experience
- 2,500+ Hours of Professional Training Delivered
- 1,500+ Professionals Trained
- 150+ Corporate & Professional Training Sessions
- 100+ Practical Security Management Case Studies
- 750+ Hours of CISM & Information Security Management Training
- 250+ Governance, Risk & Incident Management Exercises
- 10+ Industry Sectors Covered Through Training
Documented learner outcomes
Problem Statement
Healthcare organizations manage sensitive patient, clinical, and financial information that requires strong security governance and risk management.
How We Overcame the Problem
Learners applied CISM principles to establish security governance, manage risks, develop security programs, and handle incidents.
Overall Implementation
Learners implemented healthcare security processes covering governance, risk assessment, security programs, controls, incident management, and reporting.
Evidence of Learning
Learners demonstrated skills in identifying security risks, developing policies, selecting controls, managing programs, and responding to incidents.
Healthcare Security Workflow
Risk Identification → Governance → Risk Assessment → Security Program → Control Implementation → Monitoring → Incident Management → Reporting
Security Governance Implementation
Learners developed healthcare security policies, responsibilities, standards, and governance processes for protecting sensitive information.
Risk Management Implementation
Learners assessed threats to patient systems, applications, networks, and data and prioritized appropriate risk treatments.
Security Program & Incident Management
Learners planned security controls, awareness activities, metrics, incident response, containment, recovery, and post-incident reviews.
Problem-Solving Evidence
Learners addressed data exposure, unauthorized access, compliance risks, security gaps, and healthcare cyber incidents.
Comparative Evidence
Learners compared security decisions based on business impact, risk level, regulatory requirements, control effectiveness, and resource needs.
Overall Outcome
Learners demonstrated practical CISM skills for managing healthcare information security governance, risk, security programs, and incidents.
Final Evidence
A healthcare security scenario, risk assessment, governance policies, security program, controls, incident-response plan, metrics, and management report provide evidence of practical competency.
Helpful answers for planning your training
Frequently asked questions
CISM stands for Certified Information Security Manager. It is an ISACA certification focused on information security governance, information security risk management, information security programs, and incident management.
CISM training is suitable for information security managers, cybersecurity managers, risk professionals, security program managers, GRC professionals, and experienced IT professionals seeking management-focused security knowledge.
Learner reviews
Rated by 3,000 learners
Rating and review totals are controlled per course in the CRM.
4.1out of 5
Popular cities in Gibraltar
Compare city information, course curriculum, exam details and ways to enquire.
Book with clarity
Clear pricing, protected approval and learner support
Approval before payment
A secure payment link is shared only after the CRM team confirms the request.
Live instructor-led delivery
Ask questions during the session and learn alongside a scheduled cohort.
Verified learner feedback
Published course feedback is linked to completed learner records and CRM approval.
Visible schedules
Review weekday and weekend dates, duration, timezone and seat availability before booking.