CISM: Domain 2 - Module 4

This is the final module of domain two and looks at metrics, monitoring, and reporting within the sphere of risk management. We look at how to measure risk through key risk indicators (KRIs) and how monitoring of these can help us to avoid risks in the first place.

We also look at the controls that can be put in place to reduce risk overall in our organizations.

Learning Objectives

• Understanding how to monitor and measure risk
• Mitigate risk through controls

Intended Audience

This lesson is intended for anyone preparing for the Certified Information Security Management exam or anyone who is simply interested in improving their knowledge of information security governance.

Prerequisites

Before taking this lesson, we recommend taking the CISM Foundations course first.