ISO

Question 1

ISO17788

Answer 1

Cloud computing, overview, and vocabulary.

Question 2

ISO2237

Answer 2

7 part series on physical environment

Question 3

ISO27000

Answer 3

Overview and glossary (make sense since, first section, u know ZERO about this yet)

Question 4

ISO27001

Answer 4

Formal ISMS specification, security governance - how to manage information security; standards to which to certify.

(This is the first real section, high level);
ISMS = information Security Management System;

Question 5

ISO27002

Answer 5

Infosec controls guideline; Best practice guideline; how to do 27001

Infosec Controls (Think control switch, has 2 positions), GUIDELINES (guide someone, you need to coordinate that requires 2)

Question 6

ISO27003

Answer 6

ISMS Implementation (think how to 1-2-3 steps)

Question 7

ISO27004

Answer 7

Infosec measurements [metrics] (think 4 as four quadrants)

Question 8

ISO27005

Answer 8

Infosec risk management (Poker is risky, you play with 5 cards)

Question 9

ISO27006

Answer 9

ISMS certification & audit guide (ssssertication - pronounce the 6)

Question 10

ISO27007

Answer 10

Management system Audit (lucky 7 if you pass the audit)

Question 11

ISO27009

Answer 11

Information security, cybersecurity, and privacy protection — Sector-specific application of ISO/IEC 27001

Question 12

ISO27010

Answer 12

Critical infrastructure (“10” is critical)

Question 13

IS027011

Answer 13

Telecommunication (11 = antenna)

Question 14

ISO27014

Answer 14

guidance on concepts and principles for the Governance of information security (make it consistent and standardized, measurable, comprehensive, and modular)

Question 15

IS027015

Answer 15

Financial (5 looks like $ dollar)

Question 16

ISO27017

Answer 16

Security guidelines, control for cloud (based on ISO/IEC 27002)

Question 17

ISO27018

Answer 17

PII for cloud

Question 18

ISO27034

Answer 18

Application security
ONF or Organizational Normative Framework
ANF or Application Normative Framework

Question 19

ISO27036

Answer 19

Supply chain security

Question 20

ISO27050

Answer 20

Digital forensic, along with 27037, 27041, 27042, 27043

Question 21

IS027099

Answer 21

Information Technology — Public key infrastructure — Practices and policy framework

Question 22

ISO28000

Answer 22

Supply chain (and other 2800*)

Question 23

ISO31000

Answer 23

Risk management framework

Question 24

ISO 15408

Answer 24

Common Criteria