ISC2 · ISC2 CC
Security culture and metrics
ISC2 CC · Lesson 7 of 16 · 48:02
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 Certified in Cybersecurity (CC) exam, on the 2026 outline. In this lesson: security culture, social engineering and phishing, awareness and password practices, and metrics, key risk indicators, and dashboards. Includes three original practice questions, with Maplewood Schools, a fictional school district, as the example.
Preview the topics
- A caller who says he works at the IT help desk asks a teacher to read out the code just sent to her phone. Which attack is this?
- Which of these measures works best as a key risk indicator for Maplewood?
- The school board wants a short quarterly view that compares each security goal with its target, in green, amber, and red. Which format fits best?