ISACA · CISM
Incident response readiness
CISM · Lesson 16 of 20 · 2:00:23
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: events and incidents, the incident response plan, incident classification and severity, response teams, and timely detection. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.
Preview the topics
- During a major ransomware attack, the team must decide whether to shut down the billing platform, and nobody knows who has the authority. What was missing from preparation?
- A Stonebridge laptop with an encrypted disk is stolen, and another incident exposes ten thousand customer records on the internet. How should the two be classified?
- Stonebridge discovers that attackers were inside its network for five months before anyone noticed. Which metric should the security manager work to improve first?