IAITAM’s Official Certified Asset Management Security Expert (CAMSE) Certification Training & Exam Package IAITAM Official Course - Includes IAITAM Course Materials & IAITAM Exam Voucher

Course Description

The primary objective of IAITAM’s CAMSE course is to optimize the role of IT Asset Management professionals in bolstering the organization’s information and physical security. This objective is achieved by bridging the divide between ITAM and IT security processes. The course integrates security strategies across ITAM policies, processes, and procedures, thereby leveraging ITAM to augment the security program and enhance applicable governance. Through this course, participants will be exposed to novel perspectives on how the ITAM program intersects with and amplifies security endeavors.

The course sheds light on the symbiotic relationship between IT asset lifecycle management and security initiatives. This interconnectedness is vital, as IT asset lifecycle management constitutes a foundational IT component. By grasping these dynamics, participants gain insights into the roles and responsibilities of individuals tasked with implementing, managing, and overseeing security initiatives within their respective organizations.

Self-Paced

This self-paced certification course is available for 90 days from the date of activation. Course materials and training access are released immediately upon registration. Students may progress through the certification at their own pace during the access period.

• With the purchase of the course, students receive immediate access to the certification course and course materials.
• Students will have 90 days from enrollment to complete the certification course and certification exam.
• Upon completion of the course, the certification exam will be released automatically the next business day at 8am ET.
• Students will then have 14 days from course completion to complete and pass the 3-hour certification exam, provided the exam is completed within the overall 90-day completion period.

In This Course You Will Learn:

• Understand the Scope of IT Security and IT Asset Management (ITAM): Define the interrelationship between IT security and ITAM, highlighting the critical importance of integrating both disciplines.
• Differentiate Between Threat Prevention and Threat Protection: Distinguish strategies for preventing threats versus protecting assets from existing threats and implement both approaches effectively.
• Evaluate Decentralized and Centralized Security Models: Compare and contrast decentralized and centralized security structures to determine the best fit for organizational needs.
• Develop and Implement an IT Security Plan: Create a comprehensive IT security plan that aligns with organizational goals and ITAM practices.
• Understand ITAM's Role in Risk Management: Leverage ITAM processes to identify, assess, and mitigate risks associated with IT assets.
• Integrate ITAM’s 12 Key Process Areas (KPAs) with Security: Apply the 12 KPAs of ITAM to enhance IT security efforts, including program management, communication, policy, acquisition, and disposal.
• Enhance Program Management with Security Considerations: Incorporate security measures into program management to ensure ITAM alignment with security objectives.
• Strengthen Communication and Education for Security Awareness: Develop and manage communication strategies and educational initiatives to promote security awareness across the organization.
• Implement Policy Management for Security: Establish, maintain, and enforce policies that incorporate IT security within ITAM frameworks.
• Secure Acquisition Management Processes: Integrate security protocols into acquisition management to minimize risks associated with new asset procurement.
• Improve Asset Identification with Security Protocols: Implement robust asset identification processes that include security tagging and tracking measures.
• Develop Secure Disposal Management Practices: Ensure secure and compliant disposal of IT assets to protect sensitive data and meet regulatory requirements.
• Incorporate Security into Project Management: Embed security considerations into project management practices to safeguard IT assets and processes.
• Ensure Documentation Management Supports Security: Maintain secure documentation practices to protect sensitive information related to IT assets.
• Link Financial Management with Security Measures: Align financial management practices with security objectives to allocate resources effectively and mitigate risks.
• Comply with Relevant Legislation for Security: Understand and adhere to legislative requirements related to IT security and ITAM.
• Strengthen Compliance Management with IT Security: Implement processes to ensure compliance with security regulations and standards.
• Enhance Vendor Management with Security Protocols: Incorporate security considerations into vendor selection, contract management, and ongoing relationships.
• Assess Asset Risk Levels: Evaluate the risk levels of various IT assets and implement tailored mitigation strategies.
• Address Program Issues by Asset Type: Identify and manage security challenges specific to different types of IT assets.
• Conduct ITAM Program Security Assessments: Assess the ITAM program's effectiveness in supporting and enhancing IT security.

Prerequisites

The CAMSE Course is designed for those individuals with an understanding of how the ITAM program is managed within an organization or for IT security professionals wishing to understand how ITAM empowers IT security. It is essential learning for IT Asset Managers and other professionals involved in Asset Management, strategic planning, security programs and those affected or influenced by ITAM and security initiatives.

Outline

Module 1: Overview

• Introduction & IAITAM Overview
• The Association Behind the Profession
• Membership Structure and the Professional Community
• The IAITAM Best Practice Library and the 12 Key Process Areas
• The Eight IAITAM Certifications
• Conferences and Publications
• Continuing Education
• ITAM360 Tools and Program Assessment
• New Certified Artificial Intelligence Asset Manager (CAIAM)
• Certified AI Governance Officer (CAIGO)
• Certified Artificial Intelligence Asset Manager (CAIAM)
• Certified AI Assurance Auditor (CAIAA)

Module 2: The Scope of Security and IT Asset Management

• Understanding What Security Really Means.
• The Uncomfortable Truth About Security
• The Asset Security Ecosystem and the Human Factor
• Physical Security Foundations
• Threat Prevention and Threat Detection
• Distinguishing Security Terminology
• Security Incidents, Events, and Organizational Response
• Building a Security Program
• The Security Automation Landscape
• Measuring Security Maturity
• Layered Security and ITAM
• Security in the Cloud

Module 3: Preparing to Secure Assets

• From Mission to Risk Management
• The Mission of Information Security
• Structure and Purpose of a Security Plan
• System Security Plans
• Foundations of Risk Management
• Risk Assessment Frameworks
• Analyzing What Risks to Mitigate
• Enterprise Risk Management and Risk Tolerance
• Breaking Down Risk Components
• Organizational Factors in Security Planning
• The Growing Sophistication of Cyber Threats
• Common Cyberattack Methods
• Budget Pressures and Security Investment
• The Cybersecurity Risk Management Cycle
• The Effect of Laws on Security and ITAM
• Information Security Standards

Module 4: Communication and Education for Information Security

• Building a Security Aware Organization
• The Security Awareness Gap
• Humans Are the Weakest Link
• When Good Intentions Cause Harm
• The Cultural Shift Toward Security
• ITAM's Unique Role in Security Communication
• From Asset Communication to Security Communication
• The Security Communication and Education Plan
• Changing Everyday Employee Behavior
• What Makes Awareness Training Unique
• The CSIRT and Awareness Training in Action
• Testing Awareness and Keeping the Employee as Focal Point
• Why Traditional Approaches Fall Short
• Planning an Awareness Campaign
• Best Practices for Awareness Sessions
• Making Employees Part of the Solution and Shared Responsibility

Module 5: Policies for Information Security

• The Policy Foundation
• How Security Policies Influence ITAM Operations
• Characteristics of Effective Policies
• Managing Multiple Policy Documents
• Information Security Policies in Practice
• The Policy Hierarchy

Module 6: Asset Lifecycle and Security

• Asset Lifecycle and Security
• The Asset Lifecycle from End to End
• Roles in the Asset Lifecycle
• Information Stores and Processes
• Acquisition Management as Gatekeeper
• Request, Approval, and Standard vs. Non-Standard
• Redeployment and Vendor Consolidation
• Asset Selection Processes Overview
• RFB/RFQ — Simple Selection
• Pre-Selection Fact Finding
• Complex Acquisitions
• Contractual Elements and Security Risk
• Leasing and Telework Contract Risks
• Service and Cloud Contract Risks
• Contractual Questions for Software
• Total Cost of Ownership
• ITAM's Role in TCO Analysis
• Asset Standards and Security
• Acquisition Issues for Software
• Acquisition Issues for Hardware
• Acquisition Issues for Mobile and Cloud

Module 7: Assets Entering the Organization's Environment

• From Delivery Dock to Digital Defense
• The Second Critical Gate
• Acceptance Criteria and the RMA Process
• Asset Identification Fundamentals
• Tagging: Making Hardware Visible
• Three Data Elements and Serial Number Limitations
• Hardware Security Classification and Redeployment
• Data Breaches and ITAM's Role
• Software Security, CVE Management, and the Audit Trail

Module 8: Assets While in Use

• Securing the Operational Environment
• Accurate Inventory as ITAM's Most Important Security Deliverable
• How IT Security Uses the Inventory: Prevent, Detect, Notify
• Patch Management and Security
• Securing Data Access: Encryption and Authentication
• Information Security Actions During the Use Phase
• Risk Classification During the Asset Lifecycle
• ITAM's Role in Asset Physical Security
• The IMAC Process: Tracking Assets in Use
• Asset Standards and Their Security Benefits
• Deciding Which Assets to Manage
• Centralized Asset Management and Organizational Security

Module 9: Disposal and Security

• When the Lifecycle Ends, Security Doesn't
• Disposal Processes and IT Security
• Encryption and Its Role During Disposal
• Security Concerns During Disposal of Hardware, Software, and Data
• Reuse, Recycle, and e-Waste Growth
• Documentation Management for Risk and Security
• The Complete Audit Trail

Module 10: More on Key Process Areas and Security

• Very Key Process Area Supports Security
• How All 12 KPAs Collectively Support Information Security
• Security and the Compliance and Legislation Manager
• KPAs with the Most Direct Security Relationship
• Why a Coordinated Approach Across All KPAs Is More Effective

Module 11: SectionRoles and Responsibilities for ITAM Security

• The People Behind the Program
• The Rise of the CISO
• The Executive Sponsor
• Role Flexibility in ITAM
• Key Roles and Cross Role Coordination

Module 12: Security Legislation

• Navigating the Legal Landscape of IT Asset Security
• The Foundation of Digital Laws
• Types of Laws Affecting Security
• Privacy Laws and Personal Data
• Data Protection Terminology and Cross Jurisdictional Challenges

Module 13: ITAM Program Assessment for Security

• Assessing ITAM's Security Impact
• The Two Dimensions That Define ITAM's Security Value
• Defining the Mission and Partnering for Governance
• From Identification to Resolution
• When Devices Disappear
• Encryption as the First Line of Defense
• Turning Assessment into Action
• Course Completion

Certification

Please Note: Access is 90 days from the date of purchase to complete the materials and take the exam(s).

• Online certification testing is available for students starting at 8 AM the day after class finishes, or after you complete your Self-Paced course; from this point the exam will be open for 14 calendar days.
• Once a test is started, the 3 hour allotted time window cannot be paused.
• One hundred (100) randomized questions are on the IAITAM CAMSE exam and a passing mark is achieved by attaining 85% or higher.
• Students are provided two attempts with the purchase of the course, unless otherwise prohibited. Both attempts are only available within the 14 calendar days window.
  • If the first two attempts are not passed, an additional attempt package (includes 2 attempts for 14 calendar days) can be purchased for $425 (membership pricing not applicable).
  • If a student is unable to complete both attempts within the original 14 day window, a 7 day extension for these attempts is available for purchase for $50. This option must be purchased before the initial 14-day window expires.
• Recertification exam is required annually in order to maintain the certification. If your recertification has expired, you have up to 6 months from the original due date to purchase a new exam package for each certification you wish to renew. Please note that these exam packages are not eligible for any member pricing.  After 6 months, you will need to purchase and retake the course and exam to regain the certification, which also does not qualify for any member pricing.

How can we help? Customer Service is standing by to answer your questions.