ISACA · CISM
Risk and the threat landscape
CISM · Lesson 5 of 20 · 36:04
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: risk concepts, risk appetite, risk tolerance, and risk capacity, the risk management life cycle, and how to follow emerging threats and manage the threat landscape. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.
Preview the topics
- For the billing platform, Stonebridge’s board accepts outages of up to four hours a year, and no more. What does this limit for one specific risk describe?
- Stonebridge’s employees have started to paste customer data into public AI chatbots, to write replies faster. What should the security manager do first?
- Stonebridge is designing a new mobile app that lets customers pay their bills. When should a threat model be built?