Information Security Management Quiz

What does ISMS stand for?

• Information Security Management Strategy

• Information Security Management System

• Information System Management Security

• Information Security Monitoring System

Which of the following is NOT a key component of ISMS?

• Marketing Strategies

• Policies

• Procedures

• Documentation

What is the primary objective of ISMS?

• Maximize profits

• Ensure confidentiality, integrity, and availability of information

• Increase employee productivity

• Enhance customer service

What does the principle of Least Privilege entail?

• Limiting access rights to the minimum necessary

• Sharing passwords among employees

• Providing maximum access rights to all users

• Allowing unrestricted access to sensitive information

Which of the following is an example of an internal risk?

• Regulatory changes

• Cyber-attacks

• Supply chain vulnerabilities

• Employee errors

What is the first step in the risk assessment process?

• Mitigate Risks

• Evaluate Risks

• Assess Risks

• Identify Risks

Which risk mitigation strategy involves shifting the risk to a third party?

• Mitigate

• Transfer

• Accept

• Avoid

What is the purpose of horizon scanning?

• To enhance employee training programs

• To gather data for compliance audits

• To anticipate future trends and challenges

• To identify immediate threats

Which type of threat intelligence focuses on high-level information for decision-makers?

• Strategic

• Technical

• Tactical

• Operational

What is a Service Level Agreement (SLA)?

• A guideline for risk management

• A report on security incidents

• A document outlining employee responsibilities

• A contract defining service expectations between an organization and its providers