ISO 17799 has two parts. The first part is an implementation guide with guidelines on how to build a comprehensive information security infrastructure and the second part is an auditing guide based…

Question

Options

• AInformation security policy for the organization
• BPersonnel security
• CBusiness continuity management
• DSystem architecture management
• ESystem development and maintenance

• A
  90% (26)
• D
  10% (3)

Explanation

ISO 17799 (the predecessor to ISO 27002) defines 10 security domains: Information Security Policy, Security Organization, Asset Classification and Control, Personnel Security, Physical and Environmental Security, Communications and Operations Management, Access Control, System Development and Maintenance, Business Continuity Management, and Compliance. All of the listed options A (Information security policy), B (Personnel security), C (Business continuity management), and E (System development and maintenance) are valid ISO 17799 domains. Option D - 'System architecture management' - is NOT an ISO 17799 domain; it is a fabricated distractor.

No community discussion yet for this question.