MCT Information security

1. Only one of the following statements is correct. Which one?

• A product can be certified ISO 27001
• A service can be certified ISO 27001
• A company's management system can be certified ISO 27001
• Any company with more than 100 persons shall be certified ISO 27001

2. An asset can be, for example:

• A document
• Software
• A risk
• The reputation of the organization
• A process

3. The 7 quality management principles include:

• The quality approach
• The process approach
• The engagement of people
• The quality policy
• Risk-based thinking

4. Examples of benefits of implementing an ISO 27001 ISMS:

• Increased security of information systems
• Enhanced resistance to threats and malware
• Improved protection of business secrets
• Reduced insurance costs
• Improved manufacturing capacity

5. In the PDCA cycle, the A stands for:

• Analyse data
• Act
• Bring support
• Adapt