ISACA · CISM
Resources, standards, and frameworks
CISM · Lesson 10 of 20 · 1:14:52
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: the resources of a security program (people and skills, processes, technology, and outsourcing), industry standards, and control frameworks like the CIS Controls and NIST SP 800-53. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.
Preview the topics
- Stonebridge’s security team has no one with cloud security skills, and the billing platform moves to the cloud in three months. What is the best first step?
- A small Stonebridge subsidiary, with three IT staff, wants a short, prioritized list of safeguards to start with. Which framework fits best?
- Stonebridge must comply with ISO/IEC 27001, PCI DSS, and NIS2, and each audit asks for similar evidence. What would reduce the work most?