ISO/IEC 27001:2022

What is the name of the ISO/IEC 27001:2022?

• Information security technique — Information security management systems — Requirements

• Information security, cybersecurity and privacy protection — Information security management systems — Requirements

• Information security — Information security management systems — Requirements

• Information technology — Security techniques — Code of practice for information security controls

What is the clause that newly added in the latest version of ISMS?

• 10.1 Continual improvement

• 6.3 Planning of changes

• 4.4 Information security management system

• 8.1 Operational planning and control

Below are the new security controls in the latest version of ISMS except:

• A.7.4 Physical security monitoring

• A.8.10 Information deletion

• A.6.1.4 Contact with special interest groups

• A.8.16 Monitoring activities

Within ISO standards, what does “shall” indicate?

• A recommendation

• A capability

• A requirement

• A permission

How many domains and security controls in Annex A ISO/IEC 27001:2022?

• 4 domains, 93 controls

• 14 domains, 114 controls

• 7 domains, 141 controls

• 10 domains, 98 controls

What kind of evidence (example) to address the requirement of 9.3.3 Management review results?

• information security objectives performance

• risk assessment report

• slide presentation

• minutes of meeting

How many new controls, updated controls, and merged controls in ISO/IEC 27001:2022?

• 10 new controls, 24 updated controls, 58 merged controls

• 11 new controls, 58 updated controls, 24 merged controls

• 24 new controls, 58 updated controls, 11 merged controls

• 58 new controls, 11 updated controls, 24 merged controls

When ending the Cloud services contract, what is the information security criteria should be considered ?

• Information deletion

• Cloud platform is being shared with other tenant

• The Service Level Agreement (SLA) with the Cloud service provider

• Physical location of the Cloud subscribed

What are the channels might be at risk from data leakage?

• Portable storage device

• Email

• File transfer

• All of the above

What are the example of implementing data masking?

• Data encryption

• Pseudonymisation

• Anonymization

• All of the above