ISO 27001 People Domain

Policy must be created by

• Regulations

• Employee

• Auditor

• Managed Services

Policy should contains

• Business Strategy

• Stakeholder Expectation

• Procedures for Handling Deviations

• Project Management Vision

Whos task that provide advice in RACI matrix

• Responsible

• Accountable

• Consult

• Inform

Data that is collected, processed, and analyzed to understand a threat actor's motives, targets, and attack behaviors.

• Threat Intelligence

• Security Incident and Event Monitoring

• Security Orchestration and Automated Response

• Advanced Persistent Threat Analyzer

In what phase security insight must be included in project management phase

• All phases

• Design phase

• Testing phase

• Operational phase

In what stage InfoSec Risk Assessment must be conducted in project management

• Early/Design stage

• Development Stage

• Testing Stage

• All Stages

What should not be done related to Asset Management

• Document the importance of Asset

• Maintain lifecycle of Asset

• Identify Ownership of Asset

• Delegate the Risk of Asset

Who should backup and restore the information of Asset (if delegated)

• Asset Owner

• Asset Custodian

• Asset Processer

• Asset User

What privilege level the guest role is?

• Level 0

• Level 1

• Level 2

• Level 3

What is the highest level of classification

• Secret

• Confidential

• Private

• Public