ISM Topic 7 Quiz

What does ISO 55000 define asset management as?

• Managing physical assets only

• Realizing value from assets

• Cybersecurity management

• Information technology management

How is an asset defined in ISO 55000?

• Any physical item

• Any entity with potential value

• Only physical assets

• Only digital assets

What is the primary focus of asset management in information security?

• Managing financial assets

• Identifying and mitigating security risks

• Inventory management

• Enhancing employee productivity

According to ISO/IEC 27001 Annex A.8.1, what is the objective of responsibility for assets?

• Assessing risks

• Defining protection responsibilities

• Managing financial assets

• Conducting internal audits

What does the "Information Asset Classification" involve?

• Managing physical assets

• Assessing cybersecurity risks

• Determining security classification levels

• Financial management

Who is responsible for classifying information assets in an organization?

• Chief Financial Officer (CFO)

• Information owner or delegate

• Chief Information Security Officer (CISO)

• Human Resources Manager

What is the purpose of the "Management of Removable Media" in ISO/IEC 27001 Annex A.8.3?

• Assessing security risks

• Preventing unauthorized disclosure of information

• Conducting internal audits

• Classifying information assets

Why is a continuous review of the security classification information register important?

• To increase bureaucracy

• To ensure cost-effectiveness

• To classify information assets initially

• To meet legal requirements

What are the considerations for the "Disposal of Media" procedures?

• Financial implications

• Minimizing information security risks

• Employee training

• Packaging procedures

Explain the significance of "Acceptable Use of Assets" in the context of information security.

• Setting financial budgets for asset management

• Defining criteria for proper asset utilization

• Identifying potential security threats

• Establishing guidelines for media disposal