CISM Certification Domain 1: Information Security Governance Video Boot Camp 2019 - Governance, Management, standards, a

The video tutorial covers various aspects of IT security, emphasizing the importance of understanding different perspectives and roles within an organization. It highlights the responsibilities of senior leadership in setting security governance and compares top-down and bottom-up security structures. Key executive roles such as CEO, CFO, CIO, and CSO are discussed, along with their impact on IT security. The tutorial also introduces important standards and control frameworks like ISO and COBIT, and explains the defense in depth strategy to protect assets through multiple security layers.

What is the primary role of senior leaders in IT security governance?

• To handle technical support issues

• To monitor daily IT operations

• To set the direction and determine risk appetite

• To implement security measures

In a top-down IT security structure, who is primarily responsible for setting the direction?

• Middle management

• IT department

• External consultants

• Senior leadership

Which executive is typically responsible for the financial viability of an organization?

• CSO

• CIO

• CFO

• CEO

What is the role of the Chief Security Officer in an ideal organizational structure?

• Handles all financial decisions

• Reports to the IT department

• Leads the marketing team

• Reports directly to the CEO

Which standard is specifically related to the payment card industry?

• ITIL

• ISO 27001

• COBIT

• PCI DSS

What is the main purpose of defense in depth in IT security?

• To focus solely on physical security

• To use multiple overlapping security controls

• To implement a single strong security measure

• To reduce the number of security controls

Which framework is used for IT service management?

• COBIT

• ITIL

• ISO 27001

• PCI DSS