ISC2 · ISC2 CC
Risk management concepts
ISC2 CC · Lesson 2 of 16 · 9:22
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 Certified in Cybersecurity (CC) exam, on the 2026 outline. In this lesson: the vocabulary of risk (assets, threats, vulnerabilities, likelihood, and impact), the risk management life cycle, assessing risk, and the four ways to treat it. Includes three original practice questions, with Maplewood Schools, a fictional school district, as the example.
Preview the topics
- Maplewood rated its risks two years ago and has not looked at them since, although it moved its grades to the cloud. Which step of the life cycle is missing?
- Maplewood buys cyber insurance to cover the costs of a possible data breach. Which treatment is this?
- The security team finds a serious risk in the student information system. Who should decide whether to accept it?