Of the following, which is the best organization or set of organizations to contribute to compliance?

• A.IT and management
• B.IT and legal
• C.IT, business management, HR and legal
• D.IT only

Comment: *

Name: *

Email: *

Verification: *

It is allowed that employees and contractors are provided with an anonymous reporting channel to report violations of information security policies or procedures ("whistle blowing")

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Why is compliance important for the reliability of the information?

• A.By meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.
• B.When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.
• C.Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.
• D.When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.

Comment: *

Name: *

Email: *

Verification: *

What is the ISO / IEC 27002 standard?

• A.It is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001
• B.It is a guide of good practices that describes the control objectives and recommended controls regarding information security.
• C.It is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.

Comment: *

Name: *

Email: *

Verification: *

What does the Information Security Policy describe?

• A.how the InfoSec-objectives will be reached
• B.which Information Security-procedures are selected
• C.what the implementation-planning of the information security management system is
• D.which InfoSec-controls have been selected and taken

Comment: *

Name: *

Email: *

Verification: *