QuestionQ61Verified/Law, Ethics, and Security Compliance ManagementCopy linkReport a problemAsk AstroTutorSave questionWhich of the following sections are covered by the ISO/IEC 27002 standard?Choose twoAFinancial assessmentBAsset managementCSecurity policyDRisk assessmentShow AnswerAnswerExplanationISO/IEC 27002 identifies security policy and asset management as areas for information security controls. Risk assessment informs the selection of controls, rather than constituting one of these listed sections; financial assessment is not a listed area.Learn moreISO/IEC 27002:2005 — Information technology — Security techniques — Code of practice for information security managementShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion