ISOISO 27001Annex A Controls OverviewEASYFree question
What does the new control A.5.7 (Threat intelligence) require?
- A.Collecting and analyzing information about information security threats to produce actionable threat intelligence
- B.Subscribing to a commercial advisory feed and forwarding each alert unchanged to the service desk for ticketing and closure by the next day
- C.Monitoring dark web forums and buying leaked credentials from brokers to test the accounts of former staff members in the directory
- D.Reviewing and filing incident reports from past years to calculate the average resolution time
Why A is correct
A.5.7 requires collecting and analyzing information relating to information security threats to produce actionable intelligence for risk management.
Know someone studying for ISO 27001? Send them this one.