The Chief Information Security Officer (CISO) of a large management firm has selected a cybersecurity framework that will help the organization demonstrate its investment in tools and systems to…

Question

Options

• APCI DSS
• BCOBIT
• CISO 27001
• DITIL

• A
  6% (1)
• C
  88% (14)
• D
  6% (1)

Explanation

ISO 27001 and Cybersecurity Frameworks

ISO 27001 is the globally recognized standard specifically designed for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS), making it ideal for demonstrating a structured investment in tools and systems to protect organizational data. It provides certifiable proof to stakeholders that the organization takes information security seriously, which aligns perfectly with the CISO's goal of demonstrating security investment.

Why the distractors are wrong:

• PCI DSS (A) is a compliance standard specifically for organizations that handle payment card data - it's industry-specific, not a broad organizational framework
• COBIT (B) focuses on IT governance and management of enterprise IT broadly, not specifically on cybersecurity tools and data protection
• ITIL (D) is an IT service management framework concerned with delivering IT services efficiently, not with information security controls

Memory Tip: Think of ISO 27001 as the "security seal of approval" - it's the only option here that results in an internationally recognized certification organizations can proudly display to prove their security posture. If the question mentions demonstrating security investment or achieving certification, ISO 27001 is almost always the answer.

No community discussion yet for this question.