Module 20: Information Security Control Testing and Evaluation CISM Domain 3 — Information Security Program Section B 10–12 min read