About Risk Trainer

Risk Trainer is practice for the part of security work that's about judgment: with more findings than people to fix them, which risks do you fix, reduce, transfer or accept, and who signs off?

Where the scenarios come from

Scenarios are AI-drafted, then fact-checked and approved by a human before they appear here. The organizations in them are fictional. Your score comes from a fixed answer key, so the same answers always get the same score. This site makes no AI calls.

No affiliation

This site is not affiliated with or endorsed by ISC2. CISSP is mentioned only to describe the exam topics the exercises relate to.