What is the greatest risk for an organization if no information security policy has been defined?

• A.It is not possible for an organization to implement information security in a consistent manner.
• B.Too many measures are implemented.
• C.If everyone works with the same account, it is impossible to find out who worked on what.
• D.Information security activities are carried out by only a few people.

Comment: *

Name: *

Email: *

Verification: *

Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

• A.Intellectual Property Rights
• B.ISO/IEC 27001:2005
• C.ISO/IEC 27002:2005
• D.Personal data protection legislation

Comment: *

Name: *

Email: *

Verification: *