ISO/IEC 27001:2022 Awareness Quiz

What is ISO/IEC 27001 mainly about?

• Quality management

• Information security management

• Environmental management

• Financial reporting

What does ISMS stand for?

• Information System Management Structure

• International Security Management System

• Information Security Management System

• Internal Security Monitoring System

Which of the following is considered “information”?

• Printed documents

• Emails

• Digital files

• All of the above

The main goal of ISO 27001 is to protect:

• Office equipment

• Company profits

• Information confidentiality, integrity, and availability

• Employees only

Which of these is an example of confidential information?

• Public company website

• Employee personal data

• Office opening hours

• Company logo

What should you do if you suspect a data breach?

• Ignore it

• Share it with friends

• Report it to management or IT immediately

• Delete all files

Which password is the most secure?

• 123456

• password

• abc123

• P@ssw0rd!2024

Who is responsible for information security in the organization?

• IT department only

• Management only

• Security officer only

• Everyone

What does “risk” in ISO 27001 refer to?

• Office accidents

• Possibility of information security threats

• Financial loss only

• Staff discipline issues

Which action helps protect information security?

• Sharing passwords

• Leaving your computer unlocked

• Locking your screen when away

• Using public Wi-Fi without care