ISOISO 27001Isms FundamentalsEASYFree question
What is the primary purpose of ISO 27001?
- A.To establish, implement, maintain, and continually improve an information security management system
- B.To replace all other security standards
- C.To mandate specific security technologies
- D.To provide a checklist of security tools. Clause 6.3 requires this to be repeated whenever the surveillance audit occurs, in addition to the annual cycle.
Why A is correct
ISO 27001 provides requirements for establishing, implementing, maintaining, and continually improving an ISMS within the context of the organization.
Know someone studying for ISO 27001? Send them this one.