Day#1 ISO 27001 Lead Auditor

What does the ISO/IEC 27001 standard provide?

• Guidelines for organizations implementing and maintaining an information security management system

• Requirements for establishing, implementing, maintaining, and improving an information security management system

• Guidance for auditing an information security management system

Organizations can obtain certification against ISO/IEC 27002 if they implement all the information security controls that are outlined in this standard.

• True

• False

Which standard provides a set of information security controls that are aligned with the controls of Annex A of ISO/IEC 27001?

• ISO/IEC 27002

• ISO/IEC 27003

• ISO/IEC 27004

What is the aim of intellectual property laws?

• To enable organizations to protect certain intangible assets

• To enable organizations to ensure that certain assets are regularly reviewed

• To enable organizations to provide asset management reports for legal purposes

Which of the following is an objective of the privacy protection policy?

• Increasing awareness regarding legal and business requirements for protecting personal information

• Increasing awareness regarding cyberattacks that target the organization

• Increasing awareness regarding the established procedures and implemented measures for protecting stored data

When are surveillance audits conducted?

• After conducting the stage 2 audit

• After conducting the audit follow-up

• After obtaining certification

ISO performs accreditation and certification activities.

• True

• False

Which of the following statements regarding certification bodies is NOT correct?

• A certification body certifies management systems, persons, processes, products, and services

• A certification body is an authoritative, independent organization that verifies whether a conformity assessment body meets established criteria

• A certification body can be a governmental or nongovernmental organization, with or without regulatory authority

Which of the activities below occurs before the audit?

• Audit preparation

• Confirmation of registration

• Internal audit and management review

Organizations whose management systems are subject to audits are referred to as:

• Auditors

• Management system certification bodies

• Auditees