This RU-vid channel is dedicated to helping aspiring professionals clear the ISACA certification exams, namely CISM and CRISC, in a single attempt. It provides a comprehensive and well-structured collection of video tutorials and Question and Answer (Q&A) series to support exam candidates on their journey to becoming certified in information security and risk management. Content Highlights: CISM Exam Preparation: In-depth video lectures and tutorials covering all domains of the CISM exam, including Information Security Governance, Risk Management, Information Security Program Development and Management, and Information Security Incident Management. CRISC Exam Preparation: Detailed video lessons focusing on the CRISC exam domains, such as Risk Identification, Risk Assessment, Risk Response, and Risk and Control Monitoring and Reporting. Question and Answer Series: Regularly updated Q&A sessions . Addressing common doubts, concerns, and challenging topics faced by exam candidates.
sir for crisc upto doman three has been covered adequately .domian 4 is being prepared. all the best sir . no other institute will give this much time what we have put in to explain each topics. thankyou and stay tuned.
@@ISACAPREPACADEMY Thanks sir for your prompt response, but i see the playlist starting form Domain 1 part 2 ... let me know how to reach part1 which will be most important part
In Q4, the easier and clear explanation: Since the question asks "What actions should the board take NEXT?" it's kind of obvious that the very next step is to check with management of the company whether the company is already compliant or not. Just like with incident response - the first thing you do upon detection of an incident (so before you do triage, containment and all else) is VALIDATE whether there was an incident or was it some kind of false positive.
In Q2 I'd also select B, and here's why: You need to consider business requirements, which should have already taken into account the legislative and regulatory requirements of the industry the company's in. Besides, an InfoSec manager must first and foremost consider what senior management of the company he/she works for says (which is defined through business goals, objectives, and requirements). As an infosec manager, you can't simply disregard business requirements of the company that employs you. You can advise the management if their data retention policy is not in line with legislative and regulatory requirements, but that's about it. But all in all, I think it's kind of a badly written question. Logic says C, but experience says B. :)
