ISO/IEC 27001:2013 ISMS AWARENESS

ISMS is an abbreviation for...

• Internet Security Management System

• Incident Security Management System

• Information Security Management System

• Internal Security Management System

What are the key principles of Information Security?

• Accessibility, Continuity & Informative

• Availability, Confidentiality & Integrity

• Answerable, Continuity & Integrity

• Achievable, Continuous & Informative

What is according to ISO/IEC 27001 irrelevant in regards to defining the scope of the ISMS?

• The technologies the organization uses.

• The location of the organization.

• The budget of the organization.

• The assets of the organization.

From the list below which one is vulnerable?

• Telnet

• SSH

• SecureVPN

• HTTPS

What is Information Security Policy?

• A set of process to ensure data assets are formally managed

• A formal business contingency & disaster recovery plan

• A guideline for Internet Security

• Provides a definitive statement of info security policy

The overall process of risk identification, risk analysis and risk evaluation is called:

• Management Review

• Risk Assessment

• Risk Management

• ISMS Internal Audit

The Information Security Policy has been developed based upon which standard?

• ISO 9001:2015

• ISO/IEC 27001:2013

• ISO 22301: 2013

• ISO 31000

Who should accountable for unresolved vulnerability issues?

• The personnel who conducted the vulnerability assessment

• The requestor

• The asset owner

• Management of the asset and/or application owner

What is the best way to ensure effectiveness of antivirus software?

• Run the antivirus software at least every hour

• Test the software by infecting your machine with a virus

• Install the latest version & update security patches

• Use the outdated antivirus software

Below are the benefits of implementing ISO/IEC 27001 except:

• Ensures the secure exchange of information

• Increases resilience to cyber attacks

• The exposure to risk is maximized

• Helps respond to evolving security threats