QUESTION: 165 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following is the PRIMARY purpose of International Organization for Standardization (ISO) 27001?

Use within an organization to formulate security requirements and objectives
Implementation of business-enabling information security
Use within an organization to ensure compliance with laws and regulations
To enable organizations that adopt it to obtain certifications

Answer(s): B

QUESTION: 166 Exam Topic: 2, Information Security Controls and Audit Management

The MOST common method to get an unbiased measurement of the effectiveness of an Information Security Management System (ISMS) is to

assign the responsibility to the information security team.
assign the responsibility to the team responsible for the management of the controls.
create operational reports on the effectiveness of the controls.
perform an independent audit of the security controls.

Answer(s): D

Reveal Solution Next Question

QUESTION: 167 Exam Topic: 2, Information Security Controls and Audit Management

The effectiveness of social engineering penetration testing using phishing can be used as a Key Performance Indicator (KPI) for the effectiveness of an organization's

Risk Management Program.
Anti-Spam controls.
Security Awareness Program.
Identity and Access Management Program.

Answer(s): C

Reveal Solution Next Question

QUESTION: 168 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following is the MOST important reason to measure the effectiveness of an Information Security Management System (ISMS)?

Meet regulatory compliance requirements
Better understand the threats and vulnerabilities affecting the environment
Better understand strengths and weaknesses of the program
Meet legal requirements

Answer(s): C

Reveal Solution Next Question

Free 512-50 Exam Braindumps (page: 43)

QUESTION: 165 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 166 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 167 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 168 Exam Topic: 2, Information Security Controls and Audit Management

512-50 Discussions & Posts