Searching CertSprout…

CertSproutGrow your skills. Collect your wins.

CertSprout is not affiliated with CompTIA, Microsoft, Cisco, ISC2, AWS or any other certification body. CertSprout reads credentials from issuers’ public records at the credential holder’s request.

For teams Privacy Terms Support About our bot Created by Samios Software Solutions

A little curiosity goes a long way

Find your next discovery.

Search certifications, learning topics, career paths, public profiles and help across CertSprout.

Search CertSprout

Browse certifications by field or career path →Provider offerings & September 2026 review notes →

Everything Certifications Mini-lessons People Career paths Study resources Exam deals App & help

Showing 20 results · Page 11 for “business”. More results are available below.

Mini-lessons

CISM · Risk assessment and treatment

Treat risk with an accountable decision

…after treatment. Reassess when the system, exposure or business tolerance changes. Worked example A risk register lists a possible outage but no affected business process. What is missing fo…

CISSP · Access governance

Access should follow the person's current role

…d the decision. A periodic access review should verify business need, rather than simply confirm that the account still exists. Worked example The same employee can create suppliers and appr…

CISSP · Risk assessment and treatment

Treat risk with an accountable decision

← PreviousPage 11Next →

People search uses public names, handles and headlines. Private and unlisted profiles are excluded. Your goals are visible only to you in search.

…after treatment. Reassess when the system, exposure or business tolerance changes. Worked example A risk register lists a possible outage but no affected business process. What is missing fo…

CISSP · Security architecture

Place controls at trust boundaries

…ant unrestricted access. The design should protect the business operation while giving responders enough logs and isolation options to investigate and contain problems. Worked example An int…

CITP · Data governance

Assign ownership across the data lifecycle

…glossary with accountable definition owners A governed business glossary makes meaning explicit and assigns responsibility for changes.

CITP · Technology governance

Governance sets direction and accountability

…oject can still disappoint if nobody owns the expected business outcome or checks whether the investment delivered it. Worked example IT reports every project as on time, but business leader…

CND · Risk assessment and treatment

Treat risk with an accountable decision

…after treatment. Reassess when the system, exposure or business tolerance changes. Worked example A risk register lists a possible outage but no affected business process. What is missing fo…

CND · Security architecture

Place controls at trust boundaries

…ant unrestricted access. The design should protect the business operation while giving responders enough logs and isolation options to investigate and contain problems. Worked example An int…

CNSP · Incident response

Containment and recovery solve different problems

…oving malware without restoring the service leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while pre…

CNSP · Security architecture

Place controls at trust boundaries

…ant unrestricted access. The design should protect the business operation while giving responders enough logs and isolation options to investigate and contain problems. Worked example An int…

CNVP · Security findings and communication

A finding should explain a decision

…aining consequences. What should be added? A supported business-impact scenario Impact should follow from demonstrated capabilities and affected assets, not speculation.

CNVP · Vulnerability management

Prioritize exposure as well as severity

…actively exploited flaw Exploit activity, exposure and business impact refine priority beyond a base severity score.

CODE · Delivery pipelines

Promote a verified artifact

… the configured checks passed; it does not prove every business requirement or production dependency was tested. Worked example A tested artifact should be deployed through staging and produ…

CPENT · Security findings and communication

A finding should explain a decision

…aining consequences. What should be added? A supported business-impact scenario Impact should follow from demonstrated capabilities and affected assets, not speculation.

CREST-CCT-APP · Security findings and communication

A finding should explain a decision

…aining consequences. What should be added? A supported business-impact scenario Impact should follow from demonstrated capabilities and affected assets, not speculation.

CREST-CCT-INF · Security findings and communication

A finding should explain a decision

…aining consequences. What should be added? A supported business-impact scenario Impact should follow from demonstrated capabilities and affected assets, not speculation.

CREST-CPSA · Security findings and communication

A finding should explain a decision

…aining consequences. What should be added? A supported business-impact scenario Impact should follow from demonstrated capabilities and affected assets, not speculation.

CREST-CRT · Security findings and communication

A finding should explain a decision

…aining consequences. What should be added? A supported business-impact scenario Impact should follow from demonstrated capabilities and affected assets, not speculation.

CRISC · Cloud governance and cost

Make ownership and cost visible

Cloud governance connects resource decisions to business ownership, access rules and spending controls. Consistent tags and accounts help identify who should respond to a cost increase or un…

CRISC · Risk assessment and treatment

Treat risk with an accountable decision

…after treatment. Reassess when the system, exposure or business tolerance changes. Worked example A risk register lists a possible outage but no affected business process. What is missing fo…