nerdexam
(ISC)2

CGRC · Question #128

BS 7799 is an internationally recognized ISM standard that provides high level, conceptual recommendations on enterprise security. BS 7799 is basically divided into three parts. Which of the…

The correct answer is B. BS 7799 Part 2 was adopted by ISO as ISO/IEC 27001 in November 2005. C. BS 7799 Part 1 was a standard originally published as BS 7799 by the British Standards Institute D. BS 7799 Part 3 was published in 2005, covering risk analysis and management. BS 7799 Part 2 was adopted by ISO as ISO/IEC 27001, BS 7799 Part 1 originated from the British Standards Institute as a code of practice, and BS 7799 Part 3, published in 2005, covers risk analysis and management.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

BS 7799 is an internationally recognized ISM standard that provides high level, conceptual recommendations on enterprise security. BS 7799 is basically divided into three parts. Which of the following statements are true about BS 7799? Each correct answer represents a complete solution. Choose all that apply. Response:

Options

  • ABS 7799 Part 1 was adopted by ISO as ISO/IEC 27001 in November 2005.
  • BBS 7799 Part 2 was adopted by ISO as ISO/IEC 27001 in November 2005.
  • CBS 7799 Part 1 was a standard originally published as BS 7799 by the British Standards Institute
  • DBS 7799 Part 3 was published in 2005, covering risk analysis and management.

How the community answered

(43 responses)
  • A
    9% (4)
  • B
    91% (39)

Why each option

BS 7799 Part 2 was adopted by ISO as ISO/IEC 27001, BS 7799 Part 1 originated from the British Standards Institute as a code of practice, and BS 7799 Part 3, published in 2005, covers risk analysis and management.

ABS 7799 Part 1 was adopted by ISO as ISO/IEC 27001 in November 2005.

BS 7799 Part 1 was adopted by ISO as ISO/IEC 17799 (later ISO/IEC 27002), which is a code of practice, not ISO/IEC 27001, which is the management system specification.

BBS 7799 Part 2 was adopted by ISO as ISO/IEC 27001 in November 2005.Correct

BS 7799 Part 2, which detailed the specification for an Information Security Management System (ISMS), was indeed adopted by ISO as ISO/IEC 27001 in October/November 2005.

CBS 7799 Part 1 was a standard originally published as BS 7799 by the British Standards InstituteCorrect

BS 7799 Part 1 was a standard originally published by the British Standards Institute (BSI), serving as a code of practice for information security management.

DBS 7799 Part 3 was published in 2005, covering risk analysis and management.Correct

BS 7799 Part 3 was published in 2005 and specifically addressed information security risk management, providing guidelines on risk assessment and treatment.

Concept tested: BS 7799 and ISO/IEC 27000 history

Source: https://www.bsigroup.com/en-GB/standards/bs-iso-iec-27001/history-of-iso-27001/

Topics

#BS 7799#ISO/IEC 27001#Information Security Standards#Standard History

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CGRC Practice