ISACA · CISM
Program development and security architecture
CISM · Lesson 9 of 20 · 1:08:47
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: what an information security program is, how it aligns with the business, information security architecture, defense in depth, and zero trust. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.
Preview the topics
- Stonebridge’s field operations team complains that new security controls slow down repairs on the power network. What should the security manager do first?
- Stonebridge’s vendors connect through a VPN, and once connected, they can reach every server. Which principle would most reduce this risk?
- Several Stonebridge projects have each designed their own way to authenticate users, with different levels of security. What would best prevent this?