MCT Information security

1. Auditee principles to follow include:

• Curiosity
• Confidentiality
• Remaining available
• Being benevolent and cooperative

1. ISO stands for:

• International Standard Organization
• International Organization for Standardization
• International Superior Organization

2. Auditor principles to be followed, among other things, are:

• Factual approach
• Professional ethics
• Professional integrity
• Remaining available
• Confidentiality

2. Confidentiality is the property of information to be:

• Accessible only to authorized persons
• Usable in due time
• Not altered
• For internal use
• Privileged

3. Internal audit can be of:

• A process
• A product
• A customer
• An external provider

3. The ISO 27001 standard defines for an information security management system:

• The requirements
• Overview and vocabulary
• Reference control objectives and controls
• The risk management

4. The benefits of setting up an ISO 27001 ISMS are, among others:

• Increased security of information systems
• Enhanced resistance to threats and malware
• Improved protection of business secrets
• Reduced insurance costs
• Improved manufacturing capacity

4. The scope of the ISO 19011 standard, among other things, contains the:

• Audit program
• Audit requirements
• Auditor competence
• Audit activities

5. In the PDCA cycle, the A stands for:

• Analyse data
• Act
• Bring support
• Adapt

5. The results of the process internal audit:

• Are management review outputs
• Are management review inputs
• Allow BCMS improvement opportunities to be found
• Are verifiable evidences