IT Risk Fundamentals case studies
IT Risk Fundamentals · Put your knowledge to work in context.
IT Risk Fundamentals is a certificate offered by ISACA, listed on the ISACA site alongside its other certificates such as IT Audit Fundamentals, Cybersecurity Fundamentals and Cloud Fundamentals. That listing is essentially all the retrieved source confirms: the dedicated pages for the credential and for its exam content outline both returned 404 at the time of retrieval, so the current number of questions, time allowance, passing score, fee, delivery format, retake rules and validity period cannot be stated here and are marked for review rather than guessed. The IT Risk Fundamentals case studies are 5 cases and about 3,293 words.
1The Unsupported Claims Platform at Northbridge Mutual
Northbridge Mutual, a mid-size property insurer, runs its claims adjudication platform on 14 of its 210 Windows Server 2012 R2 hosts. Extended support has ended, and the application vendor will not certify the product on a current operating system until its Q3 release.
671 words, about 3 min2The SOC 2 Type I Gap in a Payroll Migration
Halcyon Retail is migrating payroll and benefits administration for 8,400 employees to a SaaS provider, and go-live is six weeks away. The provider has supplied only a SOC 2 Type I report covering the design of controls at a point in time; no Type II report exists because the platform launched eleven months ago.
675 words, about 3 min3Ranking Two Risks That Tie on the Heat Map
A regional credit union maintains a 5x5 likelihood-impact register. At the quarterly review, two risks compete for the single funded remediation slot.
627 words, about 3 min4Patching a Critical Vulnerability on the Production Line
A food manufacturer operates six production lines whose human-machine interfaces run an embedded operating system the vendor no longer patches. A vulnerability in the HMI web service carries a CVSS base score of 9.8 and is being actively exploited in the wild against internet-exposed instances.
654 words, about 3 min5Privileged Access After an Acquisition
Meridian Group acquired a 900-person logistics firm eight months ago and absorbed its identity estate. An internal audit has issued a finding with a 90-day remediation deadline.
666 words, about 3 min