ISACA · CISM
Communication, recovery, and review
CISM · Lesson 20 of 20 · 2:25:38
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: incident communication and notification, eradication, recovery, and the post-incident review with lessons learned. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.
Preview the topics
- A journalist calls a Stonebridge engineer to ask about rumors of a data breach. What should the engineer do?
- Stonebridge removed malware from three infected servers, but did not check the other servers that the attacker could reach. What is the main risk?
- In a post-incident review, the team agrees that the attacker got in through an unpatched server, but nobody asks why the patch was missed. What is missing?