MCT BEGINNING

1. The treatment of nonconformities includes activities such as:

• Identifying nonconformities
• Applying a correction
• Determining root causes
• Responding to an incident
• Seeking opportunities for improvement
• Evaluating the need for corrective actions

2. The statement of applicability (SoA) allows you to:

• Treat the risks
• Determine what is part of the ISMS
• Identify and keep up to date the controls to be implemented
• Plan and audit the ISMS
• Carry out process mapping

3. Response to an incident includes, among other things:

• Taking operational incidents into account
• Taking into account incidents detected by users
• Lessons learned
• Follow-up
• Classification (level of severity)
• Treatment of root causes

4. Staff are regularly made aware of:

• Information security risks
• The level of password security
• Disciplinary rules
• Updates to policies and procedures
• The scope of the ISMS

5. The ISO 27001 standard defines for an information security management system:

• The requirements
• Overview and vocabulary
• Reference control objectives and controls
• The risk management