ISACA · CISM
Strategy and architecture
CISM · Lesson 3 of 20 · 15:44
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: what influences an information security strategy, the current and desired states, gap analysis and the roadmap that closes the gaps, and enterprise architecture frameworks such as TOGAF, Zachman, and SABSA. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.
Preview the topics
- The board asks Stonebridge’s security manager for a three-year security strategy. What should the security manager do first?
- Stonebridge has assessed its current security state, and defined the desired state with the business. What is the next step?
- Stonebridge wants every security service to trace back to a business requirement. Which framework is built around this idea?