ISC2 · ISC2 CC
Governance and controls
ISC2 CC · Lesson 3 of 16 · 15:21
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 Certified in Cybersecurity (CC) exam, on the 2026 outline. In this lesson: laws and regulations, frameworks and guidelines, policies, standards, and procedures, and the categories and types of security controls. Includes three original practice questions, with Maplewood Schools, a fictional school district, as the example.
Preview the topics
- Maplewood’s IT team reads a document that recommends a way to set up tablets, but leaves the final choice to each school. What kind of document is this?
- Maplewood requires every new employee to complete security awareness training before getting an account. Which type of control is this?
- Maplewood puts a lock on its server room door, and asks a guard to check the badge of every visitor. Which type of control is this?