Cyber risk reporting frameworks
Taught by Peter Woolley · AI tutor support included
You'll learn how organisations communicate and manage cyber security risks through formal reporting frameworks. This video covers the CSC guidance on cyber security governance, including internal and external reporting requirements, and introduces two key frameworks: the Cybersecurity Risk Management (CRM) program and
This lesson is part of a paid course
Buy the course to unlock every video lesson and the AI Tutor, plus mock exams with feedback on CIMA courses.
Already bought? Sign in
Ask the AI tutor anything about this lesson
It knows every lesson in the course — explanations, clarifications, practice questions.
In this lesson
- 0:00 Cyber risk reporting frameworks overview
- 0:25 Organisational responsibilities and cyber security governance
- 1:40 Internal and external cyber security reporting
- 3:00 Cybersecurity Risk Management Program structure
- 5:01 SOC framework components and attestation
- 6:13 SOC Two for service organisations
About this lesson
the AICPA's System and Organisational Controls (SOC) methodology. You'll understand the three components of SOC—description criteria, control criteria, and attestation—and how they apply to both manufacturing and service organisations. This content is relevant to Strategic Business Leader and governance-focused modules within CIMA and ACCA qualifications.
Duration: 7m
Transcript
Every lesson comes with a full searchable transcript - included with the course.
Get the P3 Objective Test course
All 58 video lessons, timed mock exams marked instantly with an explanation for every question, an AI Tutor in every lesson and lifetime access.
Already bought? Sign in