ISO 27000 Series

Question 1

Which ISO contains guidelines for initiating, implementing, maintaining, and improving an ISMS within an organization. Organizational security standards and effective security management practices?

Answer 1

ISO 27002 (Code of Practice)

Question 2

Which ISO provides an Information Security Management System (ISMS) overview and vocabulary. Structure of an ISMS, ISO/IEC 27000 series explained and terminology defined?

Answer 2

ISO 27000 (Overview and Vocabulary)

Question 3

Which ISO explains the requirements for establishing, implementing, maintaining and continuously improving an ISMS. Requirements must be met for certification purposes?

Answer 3

ISO 27001 (Requirements)

Question 4

Which ISO explains the requirements for entities that certify ISMSs. Accreditation standard that guides certification bodies on the formal process they must follow when auditing an ISMS?

Answer 4

ISO 27006 (Certification Body Requirements)

Question 5

Which ISO provides guidelines for accredited certification bodies, internal auditors, external/third party auditors on how to audit an ISMS based upon the ISO 27001 requirements?

Answer 5

ISO 27007 (Audit Guidelines)

Question 6

Which ISO provides guidelines for ISMS implementation? How to build an ISO 27001 compliant ISMS. Scoring and defining boundaries, assessing risks, risk treatments, control requirements and implementation planning?

Answer 6

ISO 27003 (Implementation Guidance)

Question 7

Which ISO gives guidelines for security risk management? Identifying assets, threats, vulnerabilities, and impacts? Systems approach to risk analysis and developing a risk treatment plan?

Answer 7

ISO 27005 (Risk Management)

Question 8

Which ISO gives guidelines for security measurement? Guidance on the development and use of metrics and measurements in order to assess the effectiveness of an implemented ISMS?

Answer 8

ISO 27004 (Measurements)

Question 9

Which ISO provides guidelines on security management for telecommunications organizations? Development and managing an ISMS within the context of the telecommunication’s overall business risks?

Answer 9

ISO 27011 (Telecommunications Organizations)

Question 10

Which ISO gives guidelines for health informatics? Best practice guidelines and a set of controls for managing health information security?

Answer 10

ISO 27799 (Health Organizations)