MCT BEGINNING

1. Examples of processes that can be outsourced:

• Carry out the management review
• Audit
• Provide training
• Planning the ISMS
• Maintain equipment
• Apply discipline

2. Examples of nonconformity treatment activity:

• Identifying nonconformities
• Applying a correction
• Determining root causes
• Responding to an incident
• Seeking opportunities for improvement
• Evaluating the need for corrective actions

3. The internal audit:

• Check staff competence
• Helps to raise awareness among staff
• Allows disciplinary actions to be taken
• Allows the compliance of the ISMS to be evaluated
• Allows the effectiveness of the ISMS to be evaluated
• Helps improve the effectiveness of the ISMS

4. Staff are made aware of, among other things:

• The importance of complying with the information security policy
• The importance of meeting the requirements of the ISMS
• The positive effectsof individual performance
• The consequences of non-compliance with ISMS policies
• Everyone's contribution to improving the performance of the ISMS
• The benefits of becoming an information security expert

5. The ISO 27001 standard defines for an information security management system:

• The requirements
• Overview and vocabulary
• Reference control objectives and controls
• The risk management