When assessing an organization’s security policy according to standards established by the International Organization for Standardization (ISO) 27001 and 27002,
when can management responsibilities be defined?
Only when assets are clearly defined
Only when standards are defined
Only when controls are put in place
Only procedures are defined
Correct answer: A
Question 2
Which of the following types of technologies would be the MOST cost-effective method to provide a reactive control for protecting personnel in public areas?
Install mantraps at the building entrances
Enclose the personnel entry area with polycarbonate plastic
Supply a duress alarm for personnel exposed to the public
Hire a guard to protect the public area
Correct answer: D
Explanation:
Question 3
Intellectual property rights are PRIMARY concerned with which of the following?