“The ISMS covers all departments within Company XYZ that have access to customers’ data. The purpose of the ISMS is to ensure the confidentiality, integrity, and availability of customers’ data, and ensure compliance with the applicable regulatory requirements regarding information security.” What does this statement describe?
An organization has justified the exclusion of control 5.18 Access rights of ISO/IEC 27001 in the Statement of Applicability (SoA) as follows: “An access control reader is already installed at the main entrance of the building.” Which statement is correct?
Which statement is an example of risk retention?
Which option below should be addressed in an information security policy?
Which approach should organizations use to implement an ISMS based on ISO/IEC 27001?
What risk treatment option has Company A implemented if it has required from its employees the change of email passwords at least once every 60 days?
