ISOISO 27001Isms FundamentalsEASYFree question
What are information security objectives in ISO 27001?
- A.Target scores from the certification body, listed in the Statement of Applicability and reviewed each audit cycle
- B.Technical control baselines for each Annex A theme, owned by the CISO and reviewed at each audit
- C.Budget lines for each security project, approved by the finance director and fixed for the full three-year certification cycle
- D.Measurable goals consistent with the information security policy, set at relevant functions and levels
Why D is correct
Information security objectives are measurable goals consistent with the policy, established at relevant functions and levels, with plans for how to achieve them.
Know someone studying for ISO 27001? Send them this one.