Topic 6: human environmental equipment security

What is the primary aim of ISO 27002 in terms of human resources security?

• Increase productivity

• Enhance employee engagement

• Reduce losses from human error or malicious activity

• Improve training efficiency

According to ISO 27000, what type of checks must be conducted on all staff?

• Annual performance reviews

• Legal compliance checks

• Character and CV checks

• Social media checks

Why should a credit check be conducted regularly for certain roles?

• To ensure they meet financial stability

• To prevent identity theft

• To safeguard access to privileged information

• To assess productivity

Which ISO standard addresses the physical and environmental aspects of security systems?

• ISO 27001

• ISO 9001

• ISO 14000

• ISO 31000

What is a common pitfall in physical security management?

• Excessive documentation

• Neglecting infrastructure security controls

• Overstaffing security teams

• Lack of regular audits

Which type of security model involves multiple layers working together to protect an asset?

• Open source security model

• Multi-layer physical security model

• Zero-trust security model

• Cloud security model

What is required for compliance with ISO 27001's physical security requirements?

• Unrestricted access to secure areas

• Fire safety training

• Documented risk assessment for auditors

• Third-party outsourcing for security

Which threat type is NOT part of physical security challenges mentioned?

• Environmental threats

• Supply threats

• Technological threats

• Politically motivated threats

According to ISO 27002, what must all staff wear in a secure facility?

• Uniforms

• Name tags or identification

• Body armor

• Protective gloves

Why should privileged information be stored in secure areas?

• To avoid data redundancy

• To meet compliance standards

• To provide an additional layer of protection

• To facilitate easy access