What is the purpose of an Information Security policy?

• A.An information security policy provides direction and support to the management regarding information security
• B.An information security policy provides insight into threats and the possible consequences
• C.An information security policy makes the security plan concrete by providing the necessary details
• D.An information security policy documents the analysis of risks and the search for countermeasures

Comment: *

Name: *

Email: *

Verification: *

Who is responsible for Initial asset allocation to the user/custodian of the assets?

• A.Asset Owner
• B.Asset Stakeholder
• C.Asset Manager
• D.Asset Practitioner

Comment: *

Name: *

Email: *

Verification: *

In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:

• A.Cooperate with investigative personnel during investigation if needed
• B.Report suspected or known incidents upon discovery through the Servicedesk
• C.Make the information security incident details known to all employees
• D.Preserve evidence if necessary

Comment: *

Name: *

Email: *

Verification: *

How is the purpose of information security policy best described?

• A.An information security policy documents the analysis of risks and the search for countermeasures.
• B.An information security policy makes the security plan concrete by providing it with the necessary details.
• C.An information security policy provides direction and support to the management regarding information security.
• D.An information security policy provides insight into threats and the possible consequences.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an information security management system standard published by the International Organization for Standardization?

• A.ISO9008
• B.ISO27001
• C.ISO22301
• D.ISO5501

Comment: *

Name: *

Email: *

Verification: *