Topic 5: Handling External Parties and Asset Ownership

What does ISO 27002 provide?

• Guidelines on asset inventory

• Description of requirements for external party dealings

• IT support policies

• Employee guidelines

What is a key aspect in dealing with third parties?

• Customer satisfaction

• Legal compliance

• Risk assessment and re-evaluation of controls

• Financial stability

Why is access to assets granted to external parties?

• For software/hardware development

• For advertising purposes

• For inventory management

• For legal counsel

Who are considered Curtin University's clients?

• Contractors

• Alumni

• Staff and students

• Security personnel

What must the outside party specify regarding security arrangements?

• Data transfer protocols

• Security compliance methods

• Asset valuation metrics

• Database structures

Outsourcing affects the organization by transferring what to an external party?

• Financial obligations

• Security of information and services

• Customer data only

• Payroll systems

Which of the following is an example of physical access control?

• Passwords

• Firewalls

• Video cameras

• Encryption

What must organizations carefully evaluate before granting customer access to assets?

• The value of shared data

• The total cost of the contract

• Marketing potential

• Client satisfaction

What should be documented in the asset ownership repository?

• Software usage

• Owner of the asset

• Frequency of asset use

• Staff responsibilities

What is a requirement for organizations before granting access to on-site staff?

• Comprehensive risk assessment

• Background checks

• Financial auditing

• Marketing evaluation