최신CertiProf Certified ISO/IEC 27001:2022 Foundation - I27001F무료샘플문제

A. The company history and the motivation for implementing the ISMS

B. The information security objectives

C. The results of previous audits

D. The name of the intrusion detection system

A. Establish objectives for relevant functions and levels

B. Develop improvement plans using ISO/IEC 27002 to achieve the information security objectives

C. Maintain documented information about the objectives

D. Ensure that the objectives are consistent with the information security policy

A. A person designated by top management with expertise to perform information security risk treatment

B. A consultancy to accurately perform information security risk treatment

C. Performing an information security risk treatment process to select appropriate risk treatment options, taking into account the results of the risk assessment

D. Acquiring a set of information security tools to automate risk treatment

A. A person designated by top management with expertise to perform information security risk treatment

B. A consultancy to accurately perform information security risk treatment

C. Performing an information security risk treatment process to select appropriate risk treatment options, taking into account the results of the risk assessment

D. Acquiring a set of information security tools to automate risk treatment

A. To ensure the continuing suitability, adequacy, and effectiveness of the ISMS

B. To ensure that the information security policy covers all controls indicated in ISO/IEC 27001

C. To ensure that employees receive information about updates to information security policies

D. To ensure that the information security policy matches all identified risks