This course delves into the information security program development and management domain, covering the essential activities required to create, implement, and manage an enterprise information security program effectively. It begins with an exploration of program components, frameworks, benchmarks, metrics, and training. The course then examines critical elements such as asset classification, controls, configuration and change management, patch and vulnerability management, and the software development life cycle. Additionally, it addresses cloud computing, vendor management, and the technical aspects of secure design, including design principles, network access control, cryptography, and physical security. With three lessons and 26 sub-lessons aligned with ISACA's objectives, the course includes interactive challenges and case studies to enhance learning. Each lesson concludes with a quiz, emphasizing the role of an information security program manager in developing best practices and aligning security programs with organizational goals.