ISC2 · CISSP
Governance and policies
CISSP · Lesson 2 of 34 · 9:34
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: aligning security with the business, governance roles and responsibilities, security frameworks, due care and due diligence, and policies, standards, procedures, and guidelines. Includes three original practice questions.
Preview the topics
- Larkspur Health buys a clinic network whose systems are poorly patched. When should their security be assessed?
- A document requires that every laptop use full disk encryption with AES and 256-bit keys. What type of document is this?
- The board asks whether Larkspur investigated the security of a new cloud provider before signing the contract. Which concept is this?