EC-Council
512-50 · Question #47
According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?
The correct answer is D. Define Information Security Policy. See the full explanation below for the reasoning.
Question
According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?
Options
- AIdentify threats, risks, impacts and vulnerabilities
- BDecide how to manage risk
- CDefine the budget of the Information Security Management System
- DDefine Information Security Policy
How the community answered
(28 responses)- A4% (1)
- B18% (5)
- C7% (2)
- D71% (20)
Community Discussion
No community discussion yet for this question.