MCT Information security

1. An asset can be, for example:

• A document
• Software
• A risk
• The reputation of the organization
• A process

2. In the PDCA cycle, the A stands for:

• Analyse data
• Act
• Bring support
• Adapt

3. The 7 quality management principles include:

• The quality approach
• The process approach
• The engagement of people
• The quality policy
• Risk-based thinking

4. The ISO 27001 standard defines for an information security management system:

• The requirements
• Overview and vocabulary
• Reference control objectives and controls
• The risk management

5. Only one of the following statements is correct. Which one?

• A product can be certified ISO 27001
• A service can be certified ISO 27001
• A company's management system can be certified ISO 27001
• Any company with more than 100 persons shall be certified ISO 27001