Module 3

Question 1

what are the first 3 clauses in ISO27001 and what is special about these?

Answer 1

1: scope
2. normative references
3. terms and definitions

these first 3 clauses are not part of an audit

Question 2

what is Integrity in the CIA triad?

Answer 2

integrity is about Data Accuracy (genuine) and Completeness
-> Information cannot be altered without authorisation

Question 3

what is Availability in the CIA triad?

Answer 3

information must be accessible when required

Question 4

what is the purpose of the ISMS?

Answer 4

1. understand the orgs needs for infosec
2. implement and operate controls
3. monitor and review the performance and effectiveness of the ISMS
4. continual improvement