ISC2 · CISSP
Assessment strategies and audits
CISSP · Lesson 23 of 34 · 2:56:14
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: assessment, test, and audit strategies, internal, external, and third-party assessments, SOC 1, SOC 2, and SOC 3 reports, assessments on-premises, in the cloud, and hybrid, and conducting audits. Includes three original practice questions.
Preview the topics
- Larkspur hires an audit firm to evaluate its own security program, and report the results to its board. Which kind of assessment is this?
- Larkspur’s cloud provider refuses on-site visits. How can Larkspur still gain assurance about the provider’s controls?
- Which report describes the design of a service organization’s controls at a single point in time?