ISO Flashcards

1
Q

ISO 27001

A

Guidelines for implementing ISMS

Plan Do Check Act

Broad

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

ISO 27002

A

The “How” to implement ISMS

Catalog of Controls

Detailed across 10 domains

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

ISO 27004

A

Measuring and monitoring

Efficiency and effectiveness

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

ISO 27005

A

Risk Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

ISO 27007

A

Auditing of ISMS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

ISO 27008

A

Auditing of security controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

ISO 2014

A

Governance of Information Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

ISO 27799

A

PHI - Protected Health Information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

ISO 22301

A

DR and BCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

SLE - Single Loss Expectancy

A

AV * EF (Asset value * Exposure Value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Annual Loss Expectancy (ALE)

A

SLE * ARO

Single Loss Expectancy * Annual Rate of Occurance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

RISK

A

Threat * Vulnerability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly