Which standard provides a framework for managing sensitive company information?

The correct answer is B. ISO 27001. ISO 27001 is the international standard specifically designed for Information Security Management Systems (ISMS), providing a systematic framework for managing sensitive company information - covering confidentiality, integrity, and availability of data. ISO 9001 is a distractor

Ethical Hacking Fundamentals

Question

Options

AISO 9001
BISO 27001
CISO 14001
DISO 31000

How the community answered

(49 responses)

A
2% (1)
B
90% (44)
C
2% (1)
D
6% (3)

Explanation

ISO 27001 is the international standard specifically designed for Information Security Management Systems (ISMS), providing a systematic framework for managing sensitive company information - covering confidentiality, integrity, and availability of data. ISO 9001 is a distractor because it governs quality management systems, not information security. ISO 14001 addresses environmental management systems, while ISO 31000 is a framework for risk management broadly, not specifically for protecting sensitive information.

Memory tip: Associate 27001 with "security" by thinking "27 = secret agent number" - secret agents protect sensitive information, just like ISO 27001.

Topics

#ISO 27001#Information Security Management#Sensitive Data Protection#Security Standards

Community Discussion

No community discussion yet for this question.

Full 112-52 Practice