ISO

Question 1

What is the purpose of ISO 31000?

Answer 1

Provides principles and guidelines for managing risk across any organization.

Question 2

What are the core principles of ISO 31000?

Answer 2

Create value; Be integrated and structured; Tailored to the organization; Continuous improvement.

Question 3

What is the purpose of ISO 27001?

Answer 3

Specifies requirements for an Information Security Management System (ISMS) to protect confidentiality, integrity, and availability. Cyber-Related

Question 4

What is the main approach used in ISO 27001?

Answer 4

Risk-based approach using the PDCA cycle and Annex A controls.

Question 5

What is the purpose of ISO 22301?

Answer 5

Ensures organizations can continue operations during disruptive incidents through Business Continuity Management.

Question 6

What are key components of ISO 22301?

Answer 6

Business Impact Analysis (BIA); Risk Assessment; Continuity Strategies; Testing & Exercises.

Question 7

What is the purpose of ISO 27005?

Answer 7

Provides guidelines for managing information security risks, complementing ISO 27001. Cyber-Related

Question 8

What are the steps in ISO 27005 risk management?

Answer 8

Risk Identification; Risk Analysis; Risk Evaluation; Risk Treatment; Monitoring & Review.