Which of the following is NOT part of the steps required by ISO/IEC 27001 that an organization must take when a nonconformity is detected?

• A.Communicate the details of the nonconformity to every employee of the organization and suspend the employee that caused the nonconformity
• B.Evaluate the need for action to eliminate the causes of the nonconformity so that it does not recur or occur elsewhere
• C.React to the nonconformity, take action to control and correct it. and deal with its consequences

Comment: *

Name: *

Email: *

Verification: *

What is an example of a good physical security measure?

• A.All employees and visitors carry an access pass.
• B.Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.
• C.Printers that are defective or have been replacedare immediately removed and given away as garbage for recycling.

Comment: *

Name: *

Email: *

Verification: *

Which of the following steps is necessary to effectively implement information security controls?

• A.Implement security controls before conducting a risk assessment
• B.Establish a schedule for the implementation of each control
• C.Hire an external contractor with cybersecurity expertise

Comment: *

Name: *

Email: *

Verification: *

An organization that has an ISMS in place conducts management reviews at planned intervals, but does not retain documented information on the results. Is this in accordance with the requirements of ISO/IEC 27001?

• A.Yes. ISO/IEC 27001 does not require organizations to document the results of management reviews
• B.No, ISO/IEC 27001 requires organizations to document the results of management reviews
• C.Yes. ISO/IEC 27001 requires organizations to document the results of management reviews only if they are conducted ad hoc

Comment: *

Name: *

Email: *

Verification: *

We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information?

• A.Availability, Integrity and Confidentiality
• B.Availability, Information Value and Confidentiality
• C.Timeliness, Accuracy and Completeness
• D.Availability, Integrity and Completeness

Comment: *

Name: *

Email: *

Verification: *