Home Library Explore SAT

Home Library Explore SAT

cybersecurity Flashcards | StudBud

Explore/cybersecurity

cybersecurity

6 terms·StudBud Administration

Imported from external platform

Flashcards6 cardsFPractice quizPHost liveL

Questions 6

Answers

1
What is the main purpose of ISO/IEC 27001?
Identify vulnerabilities in U.S. infrastructure
Provide flexible guidelines for any organization
Establish and certify an Information Security Management System (ISMS)
Detect and respond to cyber incidents
2
Which of the following is a similarity between ISO/IEC 27001 and NIST CSF?
Both are risk-based and support continuous improvement
Both offer formal certification
Both are mandatory for healthcare companies
Both are U.S. government standards
3
What advantage does ISO/IEC 27001 offer over NIST CSF?
It provides a globally recognized certification
It is less time-consuming
It is more flexible and easier for small teams
It is free to implement
4
In what situation is NIST CSF often used first before implementing ISO/IEC 27001?
When the organization only handles physical documents
When certification is not a priority yet
When international recognition is needed immediately
When regulations require it from the start
5
Which of the following is not a core function of the NIST Cybersecurity Framework?
Respond
Protect
Prevent
Identify
6
What is a key difference between ISO/IEC 27001 and NIST CSF?
Only ISO 27001 is U.S.-based
NIST is older than ISO
NIST CSF provides certification
ISO is formal and certifiable; NIST is flexible and non-certifiable