Lab · Product
ISM Security Handbook
for InfoSec professionals — an offline reference for the people who run information security management, on iPhone and iPad.
iOS and iPadOS 18 or later · iPhone and iPad · English
01 — The app
What it is, and who it is for.
ISM Security Handbook is a reference for people who already do the work. The manager writing a risk treatment plan, the officer preparing for an audit, the practitioner who needs the exact distinction between two terms before a meeting starts.
It is not a course and it is not an exam simulator. There are no questions, no scores and no progress badges. Each topic card carries a summary, the core concepts, the key terms, the frameworks and lifecycles that apply, a memory anchor, the pairs that are easily confused, and a practice note.
Structural coverage is audited rather than asserted. All 218 numbered CISM nodes and all 182 AAISM sections and subsections have a topic card of their own.
02 — Contents
What is inside.
Every figure below is a count from the shipped build, not a rounded claim.
| Part | Topic cards |
|---|---|
| Part 1 · Information Security Governance | 41 — free and complete |
| Part 2 · Risk Management | 59 |
| Part 3 · Program Development & Management | 72 |
| Part 4 · Security Operations Management | 120 |
| Part 5 · AI Security Management | 186 |
The five parts, with the number of topic cards in each.
- 1,372 typed cross-links in seven relation types, with none left dangling.
- A 1,324-term glossary, assembled at run time from the topics themselves.
- Seven cross-cutting threads that run across the five parts.
- Five surfaces. Browse, an expandable map that tracks how much of a part has been read; Search, full text with a definitions block and the reader's own notes; Connect, a hub-first graph followed one hop at a time; Saved; and Glossary.
- Spotlight indexing, so a topic is reachable from the system search field.
- iPad split view with keyboard shortcuts for the five surfaces, for search and for bookmarks.
- Dynamic Type to AccessibilityXXXL, and light and dark appearance.
- iOS and iPadOS 18 or later, on iPhone and iPad.
03 — Pricing
Free app, one-time purchases.
The app is free to install, and Part 1 is free and complete — 41 topic cards, not a sample. Parts 2 to 5 are one-time purchases, and a bundle covers all four. Nothing renews, and there is no subscription. Current prices are shown on the App Store.
04 — Privacy
What the app does with data.
No account, no tracking, no third-party SDKs; the content works with the network off and no data reaches the developer.
The app declares no tracking domains and no collected data types. Two Apple-managed paths exist and nothing else: CloudKit, which holds bookmarks and notes in the reader's own private database, and StoreKit, for purchase and restore. The knowledge base itself ships inside the app: every topic card, every link and every glossary term.
05 — Screens
What it looks like.
Six screens from the shipped build, untouched apart from the resize.
On iPad
On iPhone
06 — Changelog
Release history.
| Version | What changed |
|---|---|
| 1.0 | First release. |
One version has shipped. This table grows when the next one does.
07 — Method
Built on these methods.
The five parts of the handbook cover the same ground as the methods published here. Where an entry on that ground exists, it is linked below; where nothing is published yet, the link goes to the index for that pillar.
- Part 1 · Information Security Governance
- Part 2 · Risk Management
- Part 3 · Program Development & Management
- Part 4 · Security Operations Management
All content in this app is original, written for ISM. An independent, unofficial professional reference. Not affiliated with, authorized, sponsored, or otherwise endorsed by ISACA, NIST, ISO, or any other standards body. CISM® and AAISM™ are trademarks of ISACA.