Tentamen (uitwerkingen)
ISO 27001 LEAD AUDITOR -ADVISERA EXAM
- Vak
- Instelling
ISO 27001 LEAD AUDITOR -ADVISERA EXAM...
[Meer zien]Voorbeeld 2 van de 7 pagina's
Voorbeeld 2 van de 7 pagina's
In winkelwagen
In winkelwagen
gesponsord bericht van onze partner
Verkoper
Volgen
luzlinkuz
Ontvangen beoordelingen
Voorbeeld van de inhoud
ISO 27001 LEAD AUDITOR -ADVISERAEXAM
Information Security and IT Security are the same thing - ANSWER False
An Information Security Management System is a systematic approach for
managing and protecting a company's information. - ANSWER True
The PDCA cycle is - ANSWER A method used for implementation and
maintenance of an Information Security Management System in organizations
The following roles are common in the ISMS implementation process -
ANSWER Project team
Top management
Project manager
Achieving compliance is one of the main benefits of implementing ISO 27001 -
ANSWER True
ISO 27001 requires the identification of interested parties significant for the
information security in your organization to be documented. - ANSWER False
In order to define the ISMS scope, the company shoulder consider: - ANSWER
1. Requirements of the interested parties
2. External and internal issues
3. Activities that are carried out by your organization and the activities
performed by other organizations, such as partners, associates, or an
outsourcing company; how those activities are related; and how they depend on
each other
When defining the information security objectives, the following aspects should
be taken into consideration: - ANSWER 1. Should be aligned with Information
Security policy
2. Should be measurable
3. Should be updated in order to reflect the current situation of the company and
its ISMS
, 4. Should be communicated to all interested parties
Regarding the resources, ISO 27001 requires companies to: - ANSWER 1.
identify the needed resources for the ISMS
2. ensure they are available for everyday operation
3. ensure they are available for continual improvement of the ISMS
Regarding competences, ISO 27001 requires the company to: - ANSWER 1.
Define necessary competences of employees related to information security
2. Make sure that employees have the appropriate training and experience
3. Keep documented evidence that the employees really have the required
competences
The risk management process consists of the following steps: - ANSWER 1.
Conduct risk assessment
2. Create statement of applicability
3. Define risk assessment methodology
4. Select risk treatment options
5. Create the risk treatment plan
According ISO 27001, the risk assessment must include the following elements:
- ANSWER 1. Risk evaluation
2. Risk identification
3. Risk analysis
Risk analysis includes assessment of the impact the risk can have on the
company and assessment of the likelihood that the identified risk can really
happen. The assessment scale for the impact and the likelihood must vary
between the values 1 and 10. - ANSWER False
After formulating a risk treatment plan, the Statement of Applicability must be
documented. - ANSWER False
The Statement of Applicability must include the following information: -
ANSWER 1. List of all the controls from Annex A and any additional controls
that might be identified in the risk treatment process
2. Information regarding whether the listed controls are implemented in the
organization
Dit zijn jouw voordelen als je samenvattingen koopt bij Stuvia:
Bewezen kwaliteit door reviews
Studenten hebben al meer dan 850.000 samenvattingen beoordeeld. Zo weet jij zeker dat je de beste keuze maakt!
In een paar klikken geregeld
Geen gedoe — betaal gewoon eenmalig met iDeal, creditcard of je Stuvia-tegoed en je bent klaar. Geen abonnement nodig.
Direct to-the-point
Studenten maken samenvattingen voor studenten. Dat betekent: actuele inhoud waar jij écht wat aan hebt. Geen overbodige details!
Veelgestelde vragen
Wat krijg ik als ik dit document koop?
Je krijgt een PDF, die direct beschikbaar is na je aankoop. Het gekochte document is altijd, overal en oneindig toegankelijk via je profiel.
Tevredenheidsgarantie: hoe werkt dat?
Onze tevredenheidsgarantie zorgt ervoor dat je altijd een studiedocument vindt dat goed bij je past. Je vult een formulier in en onze klantenservice regelt de rest.
Van wie koop ik deze samenvatting?
Stuvia is een marktplaats, je koop dit document dus niet van ons, maar van verkoper luzlinkuz. Stuvia faciliteert de betaling aan de verkoper.
Zit ik meteen vast aan een abonnement?
Nee, je koopt alleen deze samenvatting voor €11,27. Je zit daarna nergens aan vast.
Is Stuvia te vertrouwen?
4,6 sterren op Google & Trustpilot (+1000 reviews)
Afgelopen 30 dagen zijn er 68175 samenvattingen verkocht
Opgericht in 2010, al 15 jaar dé plek om samenvattingen te kopen