Which of the following BEST describes an international standard framework that is based on the security model Information Technology--Code of Practice for Information Security Management?

Question

Options

• AInternational Organization for Standardization 27001
• BNational Institute of Standards and Technology Special Publication SP 800-12
• CRequest For Comment 2196
• DNational Institute of Standards and Technology Special Publication SP 800-26

• A
  83% (24)
• B
  3% (1)
• C
  3% (1)
• D
  10% (3)

Explanation

ISO 27001 is the international standard framework directly derived from the "Code of Practice for Information Security Management" (originally BS 7799-2), making it the correct answer. It establishes requirements for an Information Security Management System (ISMS) and is published by the International Organization for Standardization.

Why the distractors are wrong:

• B (NIST SP 800-12): A US government publication providing an introduction to computer security - not an international standard, and not based on the Code of Practice.
• C (RFC 2196): A "Site Security Handbook" from the IETF - an internet engineering document, not an ISO framework.
• D (NIST SP 800-26): A US federal self-assessment guide for IT security - again domestic (NIST), not international.

Memory tip: The key phrase is "international standard" - only ISO qualifies as a true international standards body. Remember: ISO 27001 = ISMS, and its lineage traces directly to the British Standard (BS 7799) "Code of Practice," which ISO adopted globally.

No community discussion yet for this question.