SGSI-27001-2022-TD1

Which is the name for current ISO 27001 version?

• ISO 27001:2017

• ISO 27001:2005

• ISO 27001:2013

• ISO 27001:2021

Which needs to be ensured by checks and process to be compliant with ISO 27001?

• Integrity

• Automation

• Classification

• Availability

• Confidentiality

Answer explanation

CIA principles means:

Confidentiality

Integrity

Availability

Which document is the core of our Information Security Management System?

• Security incident Management

• ISMS Manual

• Security Policy

• Statement of Applicability

How should you act if a security incident is detected?

• Send a mail to my manager

• Send a mail to the mailbox indicated on ISMS Manual

• Keep calm and cry quietly

• Send a mail to my team to let them be aware of the incident.

How is the ISO 27001 certification life cycle?

• Initial audit process + yearly audit renovation

• Initial audit process + yearly auditing + certification renovation each 3 years

• Initial audit process + yearly internal only audit + certification renovation each 3 years

• Initial audit process + yearly auditing + certification renovation each 4 years

Answer explanation

ISO 27001 lifecycle

Initial Audit Event: The initial audit event is divided in two phases

Once the initial certification has been achieved, once per year will be an audit control.

With those evidences gathered on this yearly audit control, after three years Auditing company will extend or retire the certificationº

Is ISO 27001 related to any other certification?

• YES

• NO

Answer explanation

Yes, ISO 27001 is related to ISO 27701 which is ISO 27001 + GDPR compliance.

Also it is related to several national and internacional regulations such as ENS (Esquema Nacional de Seguridad), even when having ISO 27001 does not mean automatic achievement of this other certifications.

Who is the responsible to certificate ISO 27001 compliance?

• Private standardization companies such as AENOR

• CCN-CERT through CCN-STICS regulations which describes ISO 27001 checks.

• ISO as the organization which regulates de standard