Module 13: ISMS and the ISO 27001 Standards

What does ISMS stand for?

• International Safety Management System

• Information Security Management System

• Integrated Software Management System

• Internet Security Monitoring System

The process of systematically examining information security risks is known as:

• Risk avoidance

• Risk assessment

• Risk acceptance

• Risk celebration

What is the role of the Information Security Management Representative in ISO 27001?

• Designing software systems

• Managing financial records

• Overseeing the implementation and maintenance of the ISMS

• Planning office events

Which phase of the PDCA (Plan-Do-Check-Act) cycle involves establishing the ISMS?

• Plan

• Do

• Check

• Act

What is the significance of the Statement of Applicability (SoA) in ISO 27001?

• It outlines the organization's marketing strategy

• It lists the security controls applicable to the organization and justifies their inclusion

• It provides details on employee benefits

• It documents the organization's social media policy