CCP NIST & ISO 27001 Compliance 2

Question 1

Which NIST SP 800-53 control family specifically addresses audit and accountability?

Accepted Answer

AU - Audit and Accountability

Answer

The AU (Audit and Accountability) control family in NIST SP 800-53 covers logging, audit record generation, and accountability requirements.

Question 2

In ISO 27001:2022, what term describes the documented information that demonstrates results achieved by the ISMS?

Accepted Answer

Records

Answer

ISO 27001 distinguishes between 'documents' (information to be maintained) and 'records' (documented information providing evidence of results achieved).

Question 3

A company maps its controls to both NIST CSF and ISO 27001. Which NIST CSF function aligns most closely with ISO 27001's risk treatment process?

Accepted Answer

Protect

Answer

The Protect function, which implements safeguards to ensure delivery of services, most closely maps to ISO 27001's risk treatment where controls are selected and implemented.

Question 4

Under ISO 27001 Annex A (2022 edition), how many control categories exist?

Accepted Answer

4

Answer

ISO 27001:2022 Annex A reorganized controls into 4 themes: Organizational, People, Physical, and Technological.

Question 5

Which NIST document provides guidelines for applying the Risk Management Framework to federal information systems?

Accepted Answer

SP 800-37

Answer

NIST SP 800-37 (Risk Management Framework for Information Systems and Organizations) provides the six-step RMF process for federal systems.

(CCP) Certified Cybersecurity Professional Practice Test

(CCP) Certified Cybersecurity Professional Practice Test

CCP NIST & ISO 27001 Compliance 2