| Topic | Details |
| Topic 1 | - Vendor Selection
- Management: This section measures the expertise of a Vendor Manager and covers the process of selecting and managing third-party providers. It addresses evaluating vendor capabilities, negotiating contracts, monitoring performance, and maintaining productive relationships to ensure service quality and value.
|
| Topic 2 | - Information Security Management: This section targets an Information Security Manager and focuses on protecting information assets from threats. It covers policy development, security controls implementation, incident response, data protection, and compliance with legal and regulatory requirements to maintain confidentiality, integrity, and availability.
|
| Topic 3 | - Service Management: This domain targets a Service Delivery Manager and focuses on managing IT services to ensure consistent and efficient delivery. It includes establishing service level agreements (SLAs), incident and problem management, continuous service improvement, and aligning IT services with business demands.
|
| Topic 4 | - Business Continuity Management: This section measures the skills of a Business Continuity Manager and covers planning and implementing strategies to ensure IT availability and resilience during disruptions. It includes risk assessment, disaster recovery planning, backup procedures, and testing to minimize business impact.
|
efine the scope, objectives, and criteria for the risk assessment (e.g., organizational goals, assets, and risk appetite).