Information Security Management Examination case studies

The Information Security Management Examination is a multiple-choice credential aimed at professionals who own or advise on a security programme rather than only operating controls. Typical candidates are security managers, ISMS leads, risk and compliance officers, IT managers moving into governance, and consultants who must align security with business objectives. The exam is organised around ten domains: governance and strategy; risk management; policy, standards and procedures; organisation and responsibilities; asset management and classification; human resource security and awareness; physical and environmental security; access control and identity management; incident management and business continuity; and compliance, audit and legal or regulatory requirements. Questions test judgement as much as recall - you will be asked to choose the best control for a scenario, sequence activities correctly, or identify who owns a decision. The Information Security Management Examination case studies are 5 cases and about 5,957 words.