No matching guide sections
Change the search or section filter.
Study Guide preview
Unlock Pro for every CISM flashcard-note lesson.
Preview the beginning of Section 1. Pro includes the complete Study Guide by section, plus Course Notes, guided course access, and Pro downloads.
Unlock with Pro
Opens the CISM Practice Test purchase options.
Section 1
Organizational Culture
Preview
Preview: 1. Information Security Governance (17%)
Preview includes- 4 of 4 lesson topics
- 1 overview segment
- 3 core concepts
- 2 exam tips
Lesson Topics
- Security culture and tone at the top
- Ethics, values and behavior
- Change management and stakeholder influence
- Culture as a governance constraint
Overview
Security governance succeeds only when it fits the enterprise’s culture, values, decision-making style and appetite for change.
Core Concepts
- Culture affects how policies are interpreted, how risk is escalated, and whether personnel actually follow security expectations.
- Senior leadership establishes tone, priorities and acceptable behavior; security management translates that direction into sustainable practices.
- Resistance to security change is usually addressed through stakeholder engagement, communication and business alignment before punitive or purely technical measures.
Exam Tips
- Choose business and people interventions when the root problem is behavior or adoption.
- Senior-management sponsorship is stronger than security-team enforcement when enterprise-wide change is required.
Section 1 continues in Pro.Unlock Pro to read the full Organizational Culture lesson plus every remaining CISM Study Guide section.
Unlock with Pro
Section 2
Legal, Regulatory and Contractual Requirements
Pro
Legal, Regulatory and Contractual Requirements unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 3
Organizational Structures, Roles and Responsibilities
Pro
Organizational Structures, Roles and Responsibilities unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 4
Information Security Strategy Development
Pro
Information Security Strategy Development unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 5
Information Governance Frameworks and Standards
Pro
Information Governance Frameworks and Standards unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 6
Strategic Planning (e.g., Budgets, Resources, Business Case)
Pro
Strategic Planning (e.g., Budgets, Resources, Business Case) unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 7
Emerging Risk and Threat Landscape
Pro
Emerging Risk and Threat Landscape unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 8
Vulnerability and Control Deficiency Analysis
Pro
Vulnerability and Control Deficiency Analysis unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 9
Risk Assessment and Analysis
Pro
Risk Assessment and Analysis unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 10
Risk Treatment / Risk Response Options
Pro
Risk Treatment / Risk Response Options unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 11
Risk and Control Ownership
Pro
Risk and Control Ownership unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 12
Risk Monitoring and Reporting
Pro
Risk Monitoring and Reporting unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 13
Information Security Program Resources (e.g., People, Tools, Technologies)
Pro
Information Security Program Resources (e.g., People, Tools, Technologies) unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 14
Information Asset Identification and Classification
Pro
Information Asset Identification and Classification unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 15
Industry Standards and Frameworks for Information Security
Pro
Industry Standards and Frameworks for Information Security unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 16
Information Security Policies, Procedures and Guidelines
Pro
Information Security Policies, Procedures and Guidelines unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 17
Information Security Program Metrics
Pro
Information Security Program Metrics unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 18
Information Security Control Design and Selection
Pro
Information Security Control Design and Selection unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 19
Information Security Control Implementation and Integrations
Pro
Information Security Control Implementation and Integrations unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 20
Information Security Control Testing and Evaluation
Pro
Information Security Control Testing and Evaluation unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 21
Information Security Awareness and Training
Pro
Information Security Awareness and Training unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 22
Management of External Services (e.g., Providers, Suppliers, Third Parties, Fourth Parties)
Pro
Management of External Services (e.g., Providers, Suppliers, Third Parties, Fourth Parties) unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 23
Information Security Program Communications and Reporting
Pro
Information Security Program Communications and Reporting unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 24
Incident Response Plan
Pro
Incident Response Plan unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 25
Business Impact Analysis (BIA)
Pro
Business Impact Analysis (BIA) unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 26
Business Continuity Plan (BCP)
Pro
Business Continuity Plan (BCP) unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 27
Disaster Recovery Plan (DRP)
Pro
Disaster Recovery Plan (DRP) unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 28
Incident Classification/Categorization
Pro
Incident Classification/Categorization unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 29
Incident Management Training, Testing and Evaluation
Pro
Incident Management Training, Testing and Evaluation unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 30
Incident Management Tools and Techniques
Pro
Incident Management Tools and Techniques unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 31
Incident Investigation and Evaluation
Pro
Incident Investigation and Evaluation unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 32
Incident Containment Methods
Pro
Incident Containment Methods unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 33
Incident Response Communications (e.g., Reporting, Notification, Escalation)
Pro
Incident Response Communications (e.g., Reporting, Notification, Escalation) unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 34
Incident Eradication and Recovery
Pro
Incident Eradication and Recovery unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 35
Post-Incident Review Practices
Pro
Post-Incident Review Practices unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro