You are an experienced ISMS audit team leader conducting a third-party surveillance audit of an internet services provider. You are reviewing the organization's risk assessment processes for conformit

Question

Options

• ABoth systems contain additional information security risks which are not associated with preserving
• BThe organisation is treating information security risks in the order in which they are identified
• CThe organisation's information security risk assessment process suggests each risk is allocated a
• DThe organisation has not used RAG (Red, Amber, Green) to classify its' information security risks.
• EThe organisation's risk assessment criteria have not been reviewed and approved by top
• FThe organisation's information security risk assessment process is based solely on an assessment
• GThe organisation has assessed the probability of all of its information security risks as either 0%,
• HThere is a different system in place for assessing operational information security risks and for

• A
  2% (1)
• B
  68% (38)
• C
  9% (5)
• D
  16% (9)
• G
  2% (1)
• H
  4% (2)

Explanation

You've hit your limit · resets 4am (America/New_York)

No community discussion yet for this question.