ISO 27000 Foundation Certification Governance and Leadership 2

Question 1

In ISO 27001 terminology, who are 'interested parties'?

Accepted Answer

Persons or organizations that can affect or be affected by the ISMS

Answer

Interested parties (stakeholders) are any persons or organizations whose needs and expectations must be considered when establishing the ISMS.

Question 2

What is the purpose of assigning information security roles and responsibilities in ISO 27001?

Accepted Answer

To ensure accountability and clarity in protecting information assets

Answer

Clearly defined roles and responsibilities ensure that every aspect of information security is owned, monitored, and actioned by specific individuals.

Question 3

Which ISO standard provides specific guidance on information security governance at the enterprise level?

Accepted Answer

ISO 27014

Answer

ISO 27014 provides guidance on the governance of information security, addressing the roles of the governing body and executive management.

Question 4

What does 'organizational context' mean in the ISO 27001 framework?

Accepted Answer

Understanding internal and external factors that influence the ISMS

Answer

Organizational context requires identifying internal and external issues, as well as interested parties, that are relevant to the organization's information security objectives.

Question 5

How should information security responsibilities be communicated to employees according to ISO 27001?

Accepted Answer

Through documented policies, procedures, and awareness programs

Answer

ISO 27001 requires that roles and responsibilities be documented and communicated through formal policies, procedures, and ongoing awareness activities.

ISO 27000 Foundation Certification Practice Test

ISO 27000 Foundation Certification Practice Test

ISO 27000 Foundation Certification Governance and Leadership 2