MCT BEGINNING

1. Staff are regularly made aware of:

• Information security risks
• The level of password security
• Disciplinary rules
• Updates to policies and procedures
• The scope of the ISMS

2. The statement of applicability (SoA) allows you to:

• Treat the risks
• Determine what is part of the ISMS
• Identify and keep up to date the controls to be implemented
• Plan and audit the ISMS
• Carry out process mapping

3. Examples of processes that can be outsourced:

• Carry out the management review
• Audit
• Provide training
• Planning the ISMS
• Maintain equipment
• Apply discipline

4. Staff are made aware of, among other things:

• The importance of complying with the information security policy
• The importance of meeting the requirements of the ISMS
• The positive effectsof individual performance
• The consequences of non-compliance with ISMS policies
• Everyone's contribution to improving the performance of the ISMS
• The benefits of becoming an information security expert

5. Physical and environmental security can include:

• Secure areas
• Delivery areas
• Arrival and departure of visitors
• Indication of the purpose of the rooms
• External threats
• Classification of information