Theory refresher - risk evaluation and mitigation - Part 2 - Cyber Risk and Internal Controls
Taught by Stuart Murphy · AI tutor support included
You’ll learn how to evaluate cyber risk and recommend effective internal controls, with a focus on privacy, cloud-based client files, phishing, access rights and call recordings.
This lesson is part of a paid course
Buy the course to unlock every video lesson and the AI Tutor, plus mock exams with feedback on CIMA courses.
Already bought? Sign in
Ask the AI tutor anything about this lesson
It knows every lesson in the course — explanations, clarifications, practice questions.
In this lesson
- 0:00 Cyber Risk and Privacy
- 1:00 Assessing Vulnerabilities and Attack Vectors
- 2:01 Preventive, Detective and Recovery Controls
- 3:59 Managing Access and Security Vulnerabilities
- 6:57 Internal Controls on the Call Floor
- 8:42 Evaluating Control Cost and Effectiveness
- 10:24 Using Prevent, Detect and Correct
- 12:41 Applying Controls to Exam Questions
About this lesson
The lesson explains how to identify vulnerabilities, assess likelihood and impact, and apply preventive, detective, corrective and recovery controls. You’ll also learn how to assess control design, implementation and operating effectiveness, identify accountable owners, and consider whether the cost of a control is proportionate to the risk. The examples are based on the Core activity D syllabus and prepare you to generate well-supported recommendations in an exam-standard question.
Duration: 13m
Transcript
Every lesson comes with a full searchable transcript - included with the course.
Get the Strategic Case Study course
All 55 video lessons, online mock exams and Core Activity Mini-mocks with feedback on every task, an AI Tutor in every lesson and lifetime access.
Already bought? Sign in