The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated…

Question

Options

• AInformation Security Management System
• BThe use of tokens to gain access to information systems
• CValidation of input and output data in applications
• DEncryption of information

• A
  89% (50)
• B
  4% (2)
• C
  5% (3)
• D
  2% (1)

Explanation

An Information Security Management System (ISMS) is an organizational and administrative framework - a set of policies, procedures, and governance structures - not a technical control. It defines how security is managed at a strategic level, making it a managerial measure, not a technical one.

The distractors are all technical measures because they involve actual technology implementations: tokens (B) are hardware/software mechanisms that authenticate users at a system level; input/output validation (C) is code-level logic built into applications to prevent malformed or malicious data; and encryption (D) is a cryptographic technique applied to data in transit or at rest.

Memory tip: Ask yourself, "Does this require software, hardware, or code to function?" If yes, it's technical. An ISMS is a binder of policies and processes - it guides people, not systems - so it stands apart from the other three.

No community discussion yet for this question.