Fun with ISO27001:2022

What is ISO27001?

• ISO 27001 is an international standard for information security management systems (ISMS).

• ISO 27001 is a software application for data analysis.

• ISO 27001 is a guideline for marketing strategies.

• ISO 27001 is a certification for hardware manufacturers.

Why do we need to keep information safe?

• We need to keep information safe to protect privacy and prevent misuse.

• To make information harder to access

• To increase data storage costs

• To limit communication between people

Can you name a type of information we protect?

• Company secrets

• Medical history

• Financial records

• Personal data

What does auditing mean?

• Auditing means the preparation of tax returns for individuals and businesses.

• Auditing means the systematic examination of financial records and processes to ensure accuracy and compliance.

• Auditing is the process of creating financial records from scratch.

• Auditing refers to the casual review of financial documents without any formal process.

How often should we check our information security?

• Every month without exception

• At least quarterly and after significant changes.

• Only during audits

• Once a year

What is a risk in information security?

• A risk in information security is the guarantee of data safety.

• A risk in information security is the absence of any threats.

• A risk in information security is the complete protection against all vulnerabilities.

• A risk in information security is the potential for loss or damage due to threats exploiting vulnerabilities.

Who can help us keep our information safe?

• Cybersecurity professionals and tools.

• Social media platforms

• Friends and family members

• Public forums

What is a rule we should follow to protect data?

• Share passwords with trusted friends.

• Use strong passwords and two-factor authentication.

• Use the same password for all accounts.

• Disable all security features on devices.

Why is it important to tell someone if we see a problem?

• It's not necessary to tell anyone about problems.

• It is important to tell someone if we see a problem to ensure it is addressed promptly and effectively.

• Problems will resolve themselves over time.

• Addressing problems is someone else's responsibility.

What can happen if we don’t protect our information?

• No one will be interested in accessing your information.

• Data will automatically be deleted after a year.

• Information will become more secure over time.

• Unauthorized access to personal and sensitive information can lead to identity theft, financial loss, and reputational damage.