ISO 27001 Questions and Correct
Answers.
initial, surveillance - Answer 1 year maximum between the _____audit and ____audit
annually - Answer risk assessments must be conducted at a minimum
to protect the information assets from the loss of confidentiality, integrity, and availability -
Answer objective of any ISMS
people, process, technology - Answer types of info threats
a systematic, risk based approach for establishing, implementing, operating, monitoring,
reviewing, maintaining, and improving an organization's information security to achieve
business objectives - Answer definition of an ISMS
ISO 27001 - Answer a comprehensive minimum baseline of information security controls
that information security programs SHALL address in some manner; requirements
documentation, management, information security control - Answer 3 types of ISMS
requirements
measurement - Answer process to determine a value
monitoring - Answer determining the status of a system, a process, a product, a service or an
activity
requirement - Answer need or expectation that is stated, generally implied or obligatory
any item, process, or resource that is valued by an organization which could cause impact on
the business - Answer asset
documented statement describing the control objectives and controls that are relevant and
applicable to the organization - Answer statement of applicability
person or organization that can affect, be affected by, or perceive itself to be affected by a
decision or activity - Answer interested party
Answers.
initial, surveillance - Answer 1 year maximum between the _____audit and ____audit
annually - Answer risk assessments must be conducted at a minimum
to protect the information assets from the loss of confidentiality, integrity, and availability -
Answer objective of any ISMS
people, process, technology - Answer types of info threats
a systematic, risk based approach for establishing, implementing, operating, monitoring,
reviewing, maintaining, and improving an organization's information security to achieve
business objectives - Answer definition of an ISMS
ISO 27001 - Answer a comprehensive minimum baseline of information security controls
that information security programs SHALL address in some manner; requirements
documentation, management, information security control - Answer 3 types of ISMS
requirements
measurement - Answer process to determine a value
monitoring - Answer determining the status of a system, a process, a product, a service or an
activity
requirement - Answer need or expectation that is stated, generally implied or obligatory
any item, process, or resource that is valued by an organization which could cause impact on
the business - Answer asset
documented statement describing the control objectives and controls that are relevant and
applicable to the organization - Answer statement of applicability
person or organization that can affect, be affected by, or perceive itself to be affected by a
decision or activity - Answer interested party
