ISACA · CISM
Frameworks, planning, and business cases
CISM · Lesson 4 of 20 · 21:51
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: COBIT and governance of enterprise IT, security standards like ISO/IEC 27001 and the NIST Cybersecurity Framework, strategic planning with budgets and resources, and the business case that wins management commitment. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.
Preview the topics
- Business customers ask Stonebridge for an independent certificate, showing that its information security management system meets an international standard. Which standard fits?
- Stonebridge’s security manager needs board approval for a new identity platform. Which argument will most likely win the board’s support?
- One year after approving Stonebridge’s security program, the executives seem less interested, and attend fewer meetings. What should the security manager do?