ISACA · CISM
Designing and implementing controls
CISM · Lesson 13 of 20 · 1:32:38
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: control objectives and categories, preventive, detective, corrective, and compensating controls, how to select controls, and how to implement and integrate them. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.
Preview the topics
- Every night, Stonebridge’s finance team compares the payments sent with the invoices approved, and flags any difference. What type of control is this?
- Stonebridge’s payroll system cannot enforce segregation of duties, because the payroll team has only two people. What is the best control?
- A Stonebridge project team adds security requirements to its new customer portal only one week before launch. What is the main problem?