ISMS - testing

What does the "C" in the acronym "CARI" stand for?

• Control

• Confidential

• Compliance

• Competition

Answer explanation

The "C" in the acronym "CARI" stands for Confidential, which is the first point of trade secret protection that focuses on maintaining and controlling the confidentiality of documents.

What is the highest level of confidentiality in the classification system for trade secrets?

(a)  

Answer explanation

C5 is the highest level of confidentiality in the classification system for trade secrets, which includes top secret information, such as product logic, product full database or parameter information.

How are C4 documents shared internally to other departments?

• Freely

• With approval of relevant department

• Only with individuals within R&D

• With approval of head of department (HOD)

Answer explanation

C4 documents can only be shared internally within R&D, and if other departments require access to C4 documents, approval must be obtained from the head of department (HOD).

Password-protected files are used to protect C4 and C5 documents when sharing them externally.

• TRUE

• FALSE

• I don't know

Answer explanation

When sharing externally to protect trade secrets, C4 and C5 documents are password-protected.

Other than that, external party must sign a non-disclosure agreement (NDA).

What is the labelling rule for C4 documents?

• "Internal use" only

• "Secret" or "secret custodial"

• "Top secret" or "top secret custodial"

• No specific labelling rule

Answer explanation

C4 documents are secret information and should be labelled as "secret" or "secret custodial", with the term "custodial" referring to input materials received by the company.

What type of document can be shared freely without any restrictions?

• C1 documents

• C3 documents

• C5 documents

• All documents require same level of restrictions

Answer explanation

C1 documents are categorized as public and are accessible to the public. They can be shared freely without any restrictions.

Example:

C1: product catalogue.

What is the purpose of availability in document management?

• To ensure that unauthorized parties can access information when needed

• To ensure that authorized parties can access information when needed

• To limit access to information only to the IT department

Answer explanation

The purpose of availability is to ensure that authorized parties can access information when needed.

Which of the following issues have been encountered with the current storage system - APServer?

• Weaker user access controls

• Unable to synchronize

• Unreliable files

• All of the above

Answer explanation

The current storage system APServer has several issues that can affect the availability and reliability of trade secrets. These include weak user access controls, the inability to sync with other devices, and the potential for files to become unreliable if they are only stored on a single laptop. These issues can increase the risk of sensitive document leaks and make it difficult to access the latest versions of important documents.

What is one of the purposes of the R&D Shared library in SharePoint?

• To store highly sensitive documents that require strict access control

• To store documents that are critical for day-to-day operation and are often required by other department/customers

• To store documents that are not relevant to the R&D department

Answer explanation

The R&D Shared library contains C1-C3 documents that are critical for day-to-day operation and are often required by other department/customers.

What is the purpose of creating two new libraries, R&D Shared and R&D Internal, in SharePoint?

• To improve user access control for sensitive documents

• To provide easy accessibility and efficient sharing of critical documents

• To categorize documents for easier management and organization

• All of the above

Answer explanation

The R&D Shared library contains critical documents necessary for day-to-day operations, while the R&D Internal library contains highly sensitive documents critical to product investigation and study.

By creating separate libraries for these different types of documents, the organization can improve user access control and ensure that sensitive information is properly secured.

Additionally, the categorization of documents within these libraries helps with organization and management, making it easier for users to find the information they need.