CISSP-ISSEP: Information Systems Security Engineering Professional

Question

Numerous information-security standards encourage sound security practices and define frameworks or systems for structuring the analysis and design used to manage information-security controls. Which of the following are international information-security standards? Each correct answer represents a complete solution.

Choose all that apply.

Choose three

Explanation

ISO/IEC 27002 includes organization of information security and human resources security among its information-security control areas, while ISO/IEC 27001 requires information-security risk assessment and risk treatment within an ISMS. Audit and Accountability (AU) is a NIST SP 800-53 control family rather than an ISO/IEC international-standard domain.

Learn more

CISSP-ISSEP: Information Systems Security Engineering Professional

AstroTutor

Notes

Readiness

QuestionQ113

Community Discussion