Episode 24: Establishing Risk and Control Ownership
Ownership is essential to accountability. In this episode, we explain how to assign ownership for risks and controls, and how to ensure those responsibilities are clearly communicated and understood a...
6 Jul 202516min
Episode 23: Risk Transfer and Avoidance Strategies
Sometimes the best risk response is walking away—or handing it off. This episode focuses on transferring and avoiding risk, from insurance and outsourcing to project termination and architecture redes...
6 Jul 202516min
Episode 22: Risk Mitigation and Acceptance Strategies
When risks can't be eliminated, they must be managed. This episode covers the two most frequently used risk treatment options: mitigation and acceptance. Learn how to assess control effectiveness, doc...
6 Jul 202518min
Episode 21: Conducting Effective Risk Analysis Workshops
CISM candidates must know how to facilitate cross-functional risk workshops. In this episode, we walk through the process—from identifying participants and setting objectives to analyzing risk scenari...
6 Jul 202517min
Episode 20: Quantitative vs. Qualitative Risk Assessment
Understanding how to evaluate risk is a CISM must-have. In this episode, we break down qualitative and quantitative assessment methods—including likelihood, impact, and exposure calculations. You’ll a...
6 Jul 202518min
Episode 19: Conducting Vulnerability and Control Deficiency Analysis
Risk management starts with understanding where you’re weak. This episode teaches you how to identify control gaps and vulnerabilities, distinguish between the two, and document their business impact....
6 Jul 202518min
Episode 18: Identifying and Managing Emerging Risks (AI, Quantum, IoT)
Emerging tech means evolving risk. In this episode, we cover how technologies like AI, IoT, and quantum computing introduce new security threats—and what CISM candidates need to understand to manage t...
6 Jul 202517min
Episode 17: Current Cyber Threat Landscape
CISM Domain 2 begins here—with risk identification. This episode explores common and emerging threats, including ransomware, insider risk, APTs, and supply chain compromise. We’ll also look at how thr...
6 Jul 202516min
