CISM Certification Domain 1: Information Security Governance Video Boot Camp 2019 - The 4 CISM domains

The video tutorial covers four domains of information security. Domain 1 focuses on governance, ethics, and aligning security strategies with business goals. Domain 2 addresses risk management, including risk analysis and IT governance. Domain 3 involves developing and managing security programs, covering access control and cryptography. Domain 4 deals with incident management, emphasizing business continuity and disaster recovery planning.

What is the primary focus of Domain 1 in information security governance?

• Aligning security strategies with business goals

• Risk analysis and management

• Developing cryptographic protocols

• Incident response planning

In Domain 2, what is the main goal when dealing with risks?

• Eliminate all risks completely

• Minimize risks to an acceptable level

• Ignore risks that are not critical

• Transfer all risks to third parties

Which of the following is NOT covered in Domain 2?

• Physical security measures

• Access control implementation

• Virtualization security

• Networking security

What is a key component of Domain 3 in information security program development?

• Redundant site planning

• Incident detection and response

• Access control and authentication

• Business impact analysis

Domain 4 focuses on which aspect of information security?

• Developing security policies

• Cryptographic techniques

• Risk assessment

• Incident management and recovery