CISM - Certified Information Security Manager Cheat Sheet

11 practice tests · 331 questions

Pick an answer to see if it was correct and why, then continue.

Test 1
Organizational Culture, Legal, Regulatory and Contractual Requirements, Organizational Structures, Roles and Responsibilities
30 questions
Test 2
Information Security Strategy Development, Information Governance Frameworks and Standards, Strategic Planning, Budgets and the Business Case
31 questions
Test 3
Emerging Risk and Threat Landscape, Vulnerability and Control Deficiency Analysis, Risk Assessment and Analysis
29 questions
Test 4
Risk Treatment and Response Options, Risk and Control Ownership, Risk Monitoring and Reporting
22 questions
Test 5
Information Security Program Resources, Information Asset Identification and Classification, Industry Standards and Frameworks for Information Security
29 questions
Test 6
Information Security Policies, Procedures and Guidelines, Information Security Program Metrics, Information Security Control Design and Selection
29 questions
Test 7
Information Security Control Implementation and Integration, Information Security Control Testing and Evaluation, Information Security Awareness and Training
28 questions
Test 8
Management of External Services and Third Parties, Information Security Program Communications and Reporting, Incident Response Plan
29 questions
Test 9
Business Impact Analysis (BIA), Business Continuity Plan (BCP), Disaster Recovery Plan (DRP)
27 questions
Test 10
Incident Classification and Categorization, Incident Management Training, Testing and Evaluation, Incident Management Tools and Techniques
33 questions
Test 11 · Final
Incident Investigation and Evaluation, Incident Containment Methods, Incident Response Communications, Incident Eradication and Recovery, Post-Incident Review Practices
44 questions
+150 XP

Organizational Culture, Legal, Regulatory and Contractual Requirements, Organizational Structures, Roles and Responsibilities

Information Security Strategy Development, Information Governance Frameworks and Standards, Strategic Planning, Budgets and the Business Case

Emerging Risk and Threat Landscape, Vulnerability and Control Deficiency Analysis, Risk Assessment and Analysis

Risk Treatment and Response Options, Risk and Control Ownership, Risk Monitoring and Reporting

Information Security Program Resources, Information Asset Identification and Classification, Industry Standards and Frameworks for Information Security

Information Security Policies, Procedures and Guidelines, Information Security Program Metrics, Information Security Control Design and Selection

Information Security Control Implementation and Integration, Information Security Control Testing and Evaluation, Information Security Awareness and Training

Management of External Services and Third Parties, Information Security Program Communications and Reporting, Incident Response Plan

Business Impact Analysis (BIA), Business Continuity Plan (BCP), Disaster Recovery Plan (DRP)

Incident Classification and Categorization, Incident Management Training, Testing and Evaluation, Incident Management Tools and Techniques

Incident Investigation and Evaluation, Incident Containment Methods, Incident Response Communications, Incident Eradication and Recovery, Post-Incident Review Practices

Organizational Culture, Legal, Regulatory and Contractual Requirements, Organizational Structures, Roles and Responsibilities

Information Security Strategy Development, Information Governance Frameworks and Standards, Strategic Planning, Budgets and the Business Case

Emerging Risk and Threat Landscape, Vulnerability and Control Deficiency Analysis, Risk Assessment and Analysis

Risk Treatment and Response Options, Risk and Control Ownership, Risk Monitoring and Reporting

Information Security Program Resources, Information Asset Identification and Classification, Industry Standards and Frameworks for Information Security

Information Security Policies, Procedures and Guidelines, Information Security Program Metrics, Information Security Control Design and Selection

Information Security Control Implementation and Integration, Information Security Control Testing and Evaluation, Information Security Awareness and Training

Management of External Services and Third Parties, Information Security Program Communications and Reporting, Incident Response Plan

Business Impact Analysis (BIA), Business Continuity Plan (BCP), Disaster Recovery Plan (DRP)

Incident Classification and Categorization, Incident Management Training, Testing and Evaluation, Incident Management Tools and Techniques

Incident Investigation and Evaluation, Incident Containment Methods, Incident Response Communications, Incident Eradication and Recovery, Post-Incident Review Practices