CISM 2022: Security Standards

Global and local security standards including lAWS and regulations are an important input to determine how enterprises deploy and manage security controls.

In this course you will learn how the European Union General Data Protection Regulation (GDPR) data privacy legislation applies to any organization world-wide handling private EU citizen data. Next you will explore various International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) standards for proper data governance followed by American data privacy and cloud security standards such as Health Insurance Portability and Accountability Act (HIPAA) and Federal Risk and Authorization Management Program (FedRamp). Discover how to secure cardholder data as related to Payment Card Industry Data Security Standard (PCI DSS) international security standards and review other data privacy legislation including Canada Personal Information Protection and Electronic Documents Act (PIPEDA) and China Personal Information Protection Law (PIPL). Lastly explore the importance of securing cloud service usage in alignment with the Cloud Controls Matrix (CCM).

This course can be used to prepare for the Certified Information Security Manager (CISM) exam.