MCT BEGINNING

1. Staff are regularly made aware of:

• Information security risks
• The level of password security
• Disciplinary rules
• Updates to policies and procedures
• The scope of the ISMS

2. Assessing the risks allows us to:

• Identify the risks
• Analyze the risks
• Assess the risks
• Achieve the objectives of the ISMS
• Avoid risks

3. The statement of applicability (SoA) allows you to:

• Treat the risks
• Determine what is part of the ISMS
• Identify and keep up to date the controls to be implemented
• Plan and audit the ISMS
• Carry out process mapping

4. Examples of processes that can be outsourced:

• Carry out the management review
• Audit
• Provide training
• Planning the ISMS
• Maintain equipment
• Apply discipline

5. The ISO 27001 standard defines for an information security management system:

• The requirements
• Overview and vocabulary
• Reference control objectives and controls
• The risk management