Information Security Management System Post Test

What is definition of ISMS?

• Systematic approach for establishing, implementing, operating, monitoring, reviewing, maintaining and improving organization’s information security to achieve business objectives.

• Establish set of procedure to protect the safety of people and company.

• Provides a framework for establishing, implementing, operating, monitoring, reviewing, maintaining and improving the management of security operations.

• Provide framework to manage their operational safety risks and improve their operational safety and health performance by developing and

  implementing effective policies

  and objectives.

What is ISMS standard?

• ISO 37001:2013

• ISO 37001:2016

• ISO 27001:2013

• ISO 27001:2016

What is the ISMS Policy?

i. Availability of information processing facilities and assets are well maintained.

ii. Confidentiality of information assets will be secured and protected against unauthorized access.

iii. Ensure safety and integrity of authentication information will be safeguarded.

iv. Compliance with legal and contractual requirements.

Continual improvement of the effectiveness of information security management.

• i, ii, iii, iv

• iii, iv, iv

• i, ii, iv, v

• All of the Above

Below are the 5 types of Information Asset, except?

• Hardware

• Security

• Hardcopy

• People

How many Annex A Main Clauses in the ISO 27001:2013?

• 16

• 114

• 14

• 23

Does ISO 27001:2013 | Information Security Management System covers only for IT Department?

• Yes

• No

What is ISMS stands for?

• Information Safety Management System

• Integrated Security Management System

• Integrated Safety Management System

• Information Security Management System

ISO 27001:2013 internal audit fall under which clauses?

• Clause 4.0

• Clause 6.0

• Clause 9.0

• Clause 10.0

Which is NOT the role of auditor?

• Record evidence of conformity/non conformity

• Collecting evidence and evaluate conformity to requirements

• Assemble opening audit

• Prepare individual audit report

ISMS checklist contain 2 parts. What is the 2 parts of ISMS checklist?

• ISO 27001 & Appendix A

• ISO 27001 & Annex A

• ISO 37001 & Appendix A

• ISO 37001 & Annex A