ISACA · CISM
Ownership, monitoring, and reporting
CISM · Lesson 8 of 20 · 54:28
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: risk ownership and control ownership, the risk register, monitoring with key risk indicators and reporting to management, integration with enterprise risk management, and when to reassess risk. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.
Preview the topics
- The fraud risk on Stonebridge’s billing platform depends on a logging control run by IT operations. Who should own the fraud risk?
- Stonebridge’s board wants an early warning that the risk of a ransomware attack is rising. Which measure fits best?
- Stonebridge announces that it will acquire a smaller gas supplier next quarter. What should the security manager do?