ISACA CSX Fundamentals case studies

ISACA CSX Fundamentals · Put your knowledge to work in context.

ISACA's credentialing navigation lists "Cybersecurity Fundamentals" as a certificate, sitting in the Certificates column alongside entries such as AI Fundamentals, Cloud Fundamentals, Blockchain Fundamentals, IT Audit Fundamentals and IT Risk Fundamentals. This is a different category from ISACA's certifications, which include CISA, CISM, CRISC, CGEIT, CDPSE, CCOA – Certified Cybersecurity Operations Analyst and CCS – Certified Cybersecurity Specialist (Beta). The ISACA CSX Fundamentals case studies are 5 cases and about 4,551 words.

Funding the Right Controls Under a Fixed Security Budget

Northgate Community Health is a 14-site outpatient group with 900 staff and a 120,000 cybersecurity budget for the coming year. The electronic health record is vendor-hosted, but each site keeps a local file share holding scanned intake forms, referral letters and insurance cards.

893 words, about 4 min 2

Ransomware at a 240-Bed Hospital: Containment and Recovery Choices

At 03:10 on a Tuesday, the SIEM at a 240-bed hospital raises 40 alerts in six minutes: a service account named svc backup is authenticating to workstations it has never touched, and files on three departmental shares are being renamed with a .locked extension. The EHR is SaaS and unaffected, but the PACS imaging archive and 60 TB of shared drives are on-premises.

943 words, about 5 min 3

An Access Review That Approved Everything

A 600-person property insurer has completed its quarterly access review. Three findings emerged.

913 words, about 5 min 4

Vendor Remote Access Into a Flat OT Network

A mid-size food and beverage manufacturer runs three filling lines controlled by Siemens S7 PLCs and WinCC HMIs. The OT network shares a flat /16 with corporate IT; there is no inventory of OT assets, no monitoring on the OT side, and two HMIs still run Windows 7 because the line vendor has not certified anything newer.

914 words, about 5 min 5

SaaS Renewal With a Type I Report and a Residency Mismatch

Meridian Retail uses a marketing-analytics SaaS platform to segment its 200,000 customers by purchase history and send campaigns. Data sent to the vendor: name, email, postcode, order history and loyalty tier - no payment card data and no government identifiers.

888 words, about 4 min