Module 10: Introduction to Auditing

What is the primary purpose of auditing in ISMS?

• Identify vulnerabilities

• Ensure compliance

• Design security policies

• Develop software

Which standard is commonly used as a reference for auditing ISMS?

• ISO 9001

• ISO 27001

• ISO 14001

• ISO 20000

What is the role of an auditor in ISMS?

• Develop security protocols

• Implement security measures

• Evaluate and assess controls

• Manage IT infrastructure

Which of the following is an example of an ISMS control?

• Coffee machine access

• Firewall configuration

• Office lighting system

• Employee attendance tracking

What phase of the audit process involves reviewing documentation and policies?

• Planning

• Execution

• Reporting

• Closing