ISACA · CISM
Training and testing the plans
CISM · Lesson 18 of 20 · 2:13:18
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: training for incident response and continuity, the types of tests from checklist reviews and tabletop exercises to full interruption, running tests safely, and evaluating the results. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.
Preview the topics
- Stonebridge’s executives want to practice their decisions during a ransomware crisis, without any risk to production. Which test fits best?
- Stonebridge has never tested its disaster recovery plan. Which test should it run first?
- During a tabletop exercise, the team finds that nobody knows how to reach the backup supplier at night. What should happen next?