Which of the following parts of BS 7799 covers risk analysis and management?

The correct answer is B. Part 3. BS 7799 is a British Standards Institution security standard with three parts: Part 1 - Code of Practice for Information Security Management (later became ISO/IEC 27002); Part 2 - Specification for an Information Security Management System (later became ISO/IEC 27001); Part 3…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

APart 1
BPart 3
CPart 2
DPart 4

How the community answered

(27 responses)

A
7% (2)
B
89% (24)
C
4% (1)

Explanation

BS 7799 is a British Standards Institution security standard with three parts: Part 1 - Code of Practice for Information Security Management (later became ISO/IEC 27002); Part 2 - Specification for an Information Security Management System (later became ISO/IEC 27001); Part 3 - Guidelines for Information Security Risk Management. BS 7799-3 specifically addresses how organizations should conduct risk analysis and manage information security risks, making it the correct answer. Parts 1 and 2 focus on controls and ISMS requirements, respectively.

Topics

#BS 7799#Risk Analysis#Risk Management#Information Security Standards

Community Discussion

No community discussion yet for this question.

Full CAP Practice