Information Security Quiz

What does ISMS stand for?

• International Safety Management Standard

• Information Security Management System

• Integrated Security Management Solution

• Information Systems Monitoring Service

Answer explanation

ISMS stands for Information Security Management System, which is a systematic approach to managing sensitive company information, ensuring its confidentiality, integrity, and availability.

Which of the following is NOT part of the CIA triad?

• Confidentiality

• Integrity

• Availability

• Accountability

Answer explanation

The CIA triad consists of Confidentiality, Integrity, and Availability. Accountability, while important in security, is not one of the core components of the triad, making it the correct answer.

ISMS is only the responsibility of the IT department.

• True

• False

Answer explanation

The statement is false because Information Security Management Systems (ISMS) involve the entire organization, not just the IT department. All employees play a role in maintaining security practices.

What is the first step in the ISMS lifecycle?

• Do

• Check

• Act

• Plan

Answer explanation

The first step in the ISMS lifecycle is 'Plan'. This phase involves establishing the information security management system (ISMS) framework and objectives, setting the foundation for the subsequent steps: Do, Check, and Act.

Which regulation relates to personal data protection in Malaysia?

• GDPR

• PDPA

• HIPAA

• PCI DSS

Answer explanation

The correct regulation for personal data protection in Malaysia is the PDPA (Personal Data Protection Act). GDPR applies to the EU, HIPAA is for health information in the US, and PCI DSS relates to payment card data security.

An example of a physical security breach is:

• Phishing email

• Malware attack

• Tailgating into secure areas

• Password cracking

Answer explanation

Tailgating into secure areas is a physical security breach, as it involves unauthorized individuals gaining access to restricted locations. In contrast, phishing, malware, and password cracking are cyber threats.

Which of the following is a benefit of ISMS?

• Enhances operational efficiency

• Reduces risk of data breaches

• Builds customer trust

• All of the above

Answer explanation

ISMS provides multiple benefits, including enhancing operational efficiency, reducing the risk of data breaches, and building customer trust. Therefore, the correct answer is 'All of the above'.

The PDCA cycle stands for Plan, Do, Check, and what?

• Assess

• Act

• Analyze

• Apply

Answer explanation

The PDCA cycle consists of four stages: Plan, Do, Check, and Act. 'Act' refers to taking action based on the results of the 'Check' phase to improve processes, making it the correct answer.

ISO/IEC 27001 is an international standard for information security management.

• False

• True

Answer explanation

ISO/IEC 27001 is indeed an international standard for information security management, which outlines best practices for managing sensitive company information. Therefore, the correct answer is True.

Who is responsible for information security at your organisation?

• IT Department

• Security Team

• Management Only

• Every employee

Answer explanation

Information security is a collective responsibility at any organisation. Every employee plays a crucial role in maintaining security protocols, making 'Every employee' the correct answer.