Which of the following is a standard framework that provides recommendations for implementing information security controls for organizations that initiate, implement, or maintain information…

The correct answer is A. ISO/IEC 27002. ISO/IEC 27002 is a standard that provides best practice recommendations on information security controls for use by those responsible for initiating, implementing, or maintaining information security management systems (ISMSs). It covers areas such as risk assessment, human…

Incident Handling and Response Management

Question

Which of the following is a standard framework that provides recommendations for implementing information security controls for organizations that initiate, implement, or maintain information security management systems (ISMSs)?

Options

AISO/IEC 27002
BISO/IEC 27035
CPCI DSS
DRFC 219G

How the community answered

(30 responses)

A
93% (28)
B
3% (1)
D
3% (1)

Explanation

ISO/IEC 27002 is a standard that provides best practice recommendations on information security controls for use by those responsible for initiating, implementing, or maintaining information security management systems (ISMSs). It covers areas such as risk assessment, human resource security, operational security, and communications security, among others, providing a framework for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving an ISMS. ISO/IEC 27035 pertains to information security incident management, PCI DSS (Payment Card Industry Data Security Standard) deals with the security of cardholder data, and RFC 2196 is a guide for computer security incident response teams (CSIRTs), not a standard for implementing ISMSs.

Topics

#ISO/IEC 27002#information security controls#ISMS#compliance frameworks

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice