stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
ISO 27001 Foundation Flashcards | StudBud
Explore
/
ISO 27001 Foundation
ISO 27001 Foundation
20 terms
·
StudBud Administration
·
10 plays
Imported from external platform
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
Which of the following is a new control added in ISO/IEC 27002:2022?
Financial auditing
Marketing analysis
Threat intelligence
Employee benefits
2
How is the improvement clause structured in ISO/IEC 27001:2022?
10.1 Nonconformity, 10.2 Corrective action
10.1 Nonconformity and corrective action, 10.2 Continual improvement
10.1 Corrective action, 10.2 Continual improvement
10.1 Continual improvement, 10.2 Nonconformity and corrective action
3
What is the new control group structure in Annex A of ISO/IEC 27001:2022?
3 categories
5 domains
4 groups
14 sections
4
Which attribute is used to categorize controls in ISO 27002:2022?
Cybersecurity concepts
Control type
Information security properties
All of the above
5
How many pages does ISO/IEC 27001:2022 have compared to the 2013 version?
22
19
21
23
6
Which clause of ISO 27001 addresses the need for continual improvement of the ISMS?
Clause 5 - Leadership and commitment
Clause 10 - Improvement
Clause 4 - Context of the organization
Clause 6 - Planning
7
Which clause in ISO/IEC 27001 specifies the requirements for leadership and commitment?
Clause 7
Clause 6
Clause 4
Clause 5
8
Which clause in ISO/IEC 27001:2022 focuses on understanding the needs and expectations of interested parties?
4.2
4.1
4.4
4.3
9
What is the purpose of ISO/IEC 27005?
To provide guidelines for risk management
To define hardware specifications
To outline marketing strategies
To establish financial guidelines
10
What is the purpose of ISO/IEC 27000?
To outline marketing strategies
To define hardware specifications
To provide overview for information security management systems
To establish financial guidelines
11
What is the primary purpose of ISO/IEC 27001:2022?
To provide guidelines for software development
To outline financial management practices
To define hardware specifications for cybersecurity
To establish requirements for an information security management system
12
How many controls are there in Annex A of ISO/IEC 27001:2022?
113
95
93
114
13
What is the new name of ISO/IEC 27001:2022?
Information technology — Security techniques — ISMS
Information security management systems
Information technology — Cybersecurity techniques —ISMS
Information security, cybersecurity and privacy protection — ISMS
14
Which document is referred to for terms and definitions in ISO/IEC 27001?
ISO/IEC 31000
ISO/IEC 27002
ISO/IEC 27000
ISO/IEC 27005
15
Which ISO 27001 clause deals with risk assessment and treatment?
Clause 9 - Performance evaluation
Clause 8 - Support
Clause 6 - Planning
Clause 8 - Operation
16
What is the new control A.5.23 in ISO/IEC 27001:2022?
Information security for use of cloud services
Threat intelligence
ICT readiness for business continuity
Physical security monitoring
17
How is the internal audit clause structured in ISO/IEC 27001:2022?
9.2 Internal audit
9.2.1 General and 9.2.2 Management review
9.2.1 Internal audit and 9.2.2 Management review
9.2.1 General and 9.2.2 Internal audit programme
18
Which new control is introduced in Annex A of ISO/IEC 27001:2022?
Threat intelligence
Cryptography
Access control
Asset management
19
What is the main focus of ISO/IEC 27002?
To provide guidelines for implementing information security controls
To establish financial management practices
To define hardware specifications
To outline marketing strategies
20
ISO 27001 requires organizations to conduct regular risk assessments and treatment to manage security risks effectively.
True
False
