nerdexam
EC-Council

312-50V11 · Question #397

International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining

The correct answer is A. guidelines and practices for security controls.. ISO 27002 is an international standard that provides a reference set of information security controls and implementation guidance for organizations to use when establishing or improving their security programs.

Information Security and Ethical Hacking Fundamentals

Question

International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining

Options

  • Aguidelines and practices for security controls.
  • Bfinancial soundness and business viability metrics.
  • Cstandard best practice for configuration management.
  • Dcontract agreement writing standards.

How the community answered

(34 responses)
  • A
    88% (30)
  • B
    3% (1)
  • C
    6% (2)
  • D
    3% (1)

Why each option

ISO 27002 is an international standard that provides a reference set of information security controls and implementation guidance for organizations to use when establishing or improving their security programs.

Aguidelines and practices for security controls.Correct

ISO/IEC 27002 is specifically structured as a catalogue of information security controls with detailed guidance on selecting, implementing, and managing those controls. It complements ISO 27001 by providing best-practice recommendations for controls across domains such as access control, cryptography, and physical security. Organizations use it as a practical guide to implement and maintain a sound security posture.

Bfinancial soundness and business viability metrics.

ISO 27002 does not address financial soundness or business viability metrics - those concerns fall under financial auditing standards such as those from IFRS or GAAP.

Cstandard best practice for configuration management.

Configuration management best practices are covered by standards such as ITIL and NIST SP 800-128, not ISO 27002.

Dcontract agreement writing standards.

Contract writing standards are governed by legal and procurement frameworks, not by an information security standard like ISO 27002.

Concept tested: ISO 27002 information security controls guidance

Source: https://www.iso.org/standard/75652.html

Topics

#ISO 27002#security controls#compliance#information security standards

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V11 Practice