ISO27-13-001 ISO 27001 : 2013 - Certified Lead Auditor Questions and Answers

The computer room is protected by a pass reader. Only the System Management department has a pass.

What type of security measure is this?

There is a network printer in the hallway of the company where you work. Many employees don’t pick up their printouts immediately and leave them on the printer.

What are the consequences of this to the reliability of the information?

Often, people do not pick up their prints from a shared printer. How can this affect the confidentiality of information?

We can leave laptops during weekdays or weekends in locked bins.

You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.

What kind of threat is this?

What is an example of a human threat?

What is we do in ACT - From PDCA cycle

What would be the reference for you to know who should have access to data/document?

As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an

organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

All are prohibited in acceptable use of information assets, except:

Which of the following is an information security management system standard published by the International Organization for Standardization?

Which of the following does a lack of adequate security controls represent?