ISO27-13-001 ISO 27001 : 2013 - Certified Lead Auditor Question and Answers

Unauthorised persons will have access to both the servers and backups

Responsibility for the backups is not defined well

After a fire, the information systems cannot be restored

After a server crash, it will take extra time to bring it back up again

Restricted Data, Confidential Data

Project Data, Highly Confidential Data

Financial Data, Highly Confidential Data

Unrestricted Data, Highly Confidential Data

Capability Maturity Matrix

Capacity Maturity Matrix

Capability Maturity Model

Capable Mature Model

Implementation, operation, maintenance, establishment

Implementation, operation, improvement, maintenance

Establishment, implementation, operation, maintenance

Establishment, operation, monitoring, improvement

Corrective

Detective

Repressive

Preventive

An information security policy documents the analysis of risks and the search for countermeasures.

An information security policy provides direction and support to the management regarding information security.

An information security policy makes the security plan concrete by providing it with the necessary details.

An information security policy provides insight into threats and the possible consequences.

Throw it in any dustbin

Shred it using a shredder

Give it to the office boy to reuse it for other purposes

Be environment friendly and reuse it for writing

Asset Manager

Asset Owner

Asset Practitioner

Asset Stakeholder

a corrective security measure

a physical security measure

a logical security measure

a repressive security measure

Authorisation

Verification

Authentication

Identification

Information Security Management System (ISMS)

Rootkit

Security regulations for special information for the government

Information Technology Service Management (ITSM)

True

False