CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ245

VerifiedSecure Software Lifecycle Management

ISO 27003 is an information-security standard issued by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Which of the following elements does this standard include? Each correct answer represents a complete solution. Choose all that apply.

Choose two
Explanation

ISO/IEC 27003:2017 provides guidance on ISO/IEC 27001:2013. Its structure includes a “Terms and definitions” clause, and its planning and operation guidance addresses information security risk treatment. A process-oriented ISMS perspective is instead provided by ISO/IEC TS 27022, while certification-body requirements are covered by the ISO/IEC 27006 series.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!