Incident Response Process
Reply
Monthly Archives: February 2019
My Blueprint to The CISM Exam
This is the blueprint used in my CISM exam prep course for students to grasp the high-level understanding of information security governance and the CISM exam.
This course is delivered in Chinese and in Taipei.
Please visit http://cism.tw for details.
DoD 8570 Approved Baseline Certifications
It seems that CEH, CISSP, and CISM are one of the most cost-benefit combinations for security professionals to invest. (Please be reminded that the table lists only part of the DoD 8570 Approved Baseline Certifications.)
- https://www.sans.org/dodd-8570/
- https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/857001m.pdf
Management
Management is a systematic approach to achieve the goal.
- A goal is the statement of the desired outcome.
- A well-developed goal meets the SMART criteria.
- The PDCA cycle is one of the most common approaches to achieve the goal.
- Success is the result of achieving the goal.
SMART Goals
- A specific goal can be described with a statement of success supported by CSFs, critical success factors.
- A measurable goal can be divided into a set of objectives defined by metrics and KPIs, key performance indicators.
- An achievable goal should be with reasonable targets regarding metrics or KPIs.
- A realistic goal takes resources and constraints into considerations.
- A timely goal has a deadline.