Module 4 - Management Commitment

Question 1

Name 4 selling points to execs in implementing ISO 27001?

Answer 1

1. Client demands
2. Possible market opportunities
3. The boards fiduciary duties
4. Penalties for non-compliance such as fines or contractual

Question 2

How should the decision to implement an ISMS be seen by the business?

Answer 2

Should be seen as a commercial and strategic business decision

Question 3

Which ISO 27001 clause/section deals with requirements for engagement by senior management?

Answer 3

Clause 5 - Leadership