MCT BEGINNING

1. The ISO 27001 standard defines for an information security management system:

• The requirements
• Overview and vocabulary
• Reference control objectives and controls
• The risk management

2. Examples of processes that can be outsourced:

• Carry out the management review
• Audit
• Provide training
• Planning the ISMS
• Maintain equipment
• Apply discipline

3. Physical and environmental security can include:

• Secure areas
• Delivery areas
• Arrival and departure of visitors
• Indication of the purpose of the rooms
• External threats
• Classification of information

4. The statement of applicability (SoA) allows you to:

• Treat the risks
• Determine what is part of the ISMS
• Identify and keep up to date the controls to be implemented
• Plan and audit the ISMS
• Carry out process mapping

5. Examples of incident response:

• Taking operational incidents into account
• Taking into account incidents detected by users
• Lessons learned
• Follow-up
• Classification (level of severity)
• Treatment of root causes