ISMS Audit and Compliance
30 Questions
3 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to Lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

What is the primary objective of the ISO 17021 standard?

  • To recognise the competence of certification bodies (correct)
  • To establish a common framework for accrediting certification bodies
  • To develop a quality system for accrediting bodies
  • To provide guidelines for certification bodies during audits

What is the significance of the Multilateral Agreement among accreditation councils?

  • It ensures that certification bodies follow the same standard
  • It allows for a common interpretation of accreditation (correct)
  • It enables certification bodies to issue their own accreditation symbols
  • It provides a framework for accrediting certification bodies

What is the purpose of the Scope of Accreditation for certification bodies?

  • To define the range of industries they can operate in
  • To determine the level of accreditation they can achieve
  • To specify the certification marks they can use
  • To outline the range of products they can certify (correct)

What is the primary purpose of an Information Security Management System (ISMS)?

<p>To support the business and ensure information security (C)</p> Signup and view all the answers

What is a common misconception about implementing a management system?

<p>It is a huge task that requires developing procedures based on an abstract standard (C)</p> Signup and view all the answers

What is the difference between the ISO 17021 and ISO 27001 standards?

<p>ISO 17021 is for accrediting certification bodies, while ISO 27001 is for certifying organisations (B)</p> Signup and view all the answers

What is the role of accreditation bodies in the certification process?

<p>They accredit certification bodies (C)</p> Signup and view all the answers

What is the primary benefit of establishing an Information Security Management System (ISMS)?

<p>It provides a framework for managing information security (D)</p> Signup and view all the answers

Why do certification bodies need to demonstrate industry sector experience?

<p>To define their Scope of Accreditation (C)</p> Signup and view all the answers

What is the main goal of the 'High-Level Structure' in a management system?

<p>To support the business and ensure information security (D)</p> Signup and view all the answers

What is a key step in establishing an Information Security Management System (ISMS)?

<p>Establishing, implementing, operating, monitoring, reviewing, and improving the system (C)</p> Signup and view all the answers

What is a critical factor in the success of an Information Security Management System (ISMS)?

<p>The level of support from top management (A)</p> Signup and view all the answers

What is the primary objective of stage 2 in the ISMS implementation process?

<p>To confirm that the ISMS conforms to the standard and addresses policy objectives (B)</p> Signup and view all the answers

Which of the following aspects is NOT a focus area during the ISMS audit?

<p>Financial performance of the organization (B)</p> Signup and view all the answers

What is the minimum frequency of surveillance audits by the certification body?

<p>Annual (C)</p> Signup and view all the answers

What is a requirement for the certification body's scope?

<p>Satisfaction of auditor competence (A)</p> Signup and view all the answers

What is the primary focus of the guidance specified in 5.2 – Structure?

<p>Impartiality and responsibility (C)</p> Signup and view all the answers

What is the purpose of the surveillance audits and reassessments?

<p>To assess the effectiveness of the ISMS and legislative compliance (A)</p> Signup and view all the answers

What is the primary focus of the guidance provided?

<p>Management competence of the certification / registration body (D)</p> Signup and view all the answers

What is the minimum requirement for the composition of the audit team?

<p>At least one team member with competence in team management and legislative requirements (C)</p> Signup and view all the answers

Who is responsible for making the certification / registration decision?

<p>An entity other than the audit team (A)</p> Signup and view all the answers

What is the expected outcome if the audit team makes a negative recommendation?

<p>The certification / registration entity will never overturn the negative recommendation (A)</p> Signup and view all the answers

What is an important area of competence for at least one audit team member?

<p>Tracing information security incidents back to the ISMS elements (C)</p> Signup and view all the answers

What is the scope of the guidance in terms of management systems?

<p>Both information security management systems and management systems in general (A)</p> Signup and view all the answers

What is the primary focus of the IAF guidance on reporting by audit teams to the certification/registration body?

<p>Ensuring the adequacy of information provided in the audit report (D)</p> Signup and view all the answers

What is the condition precedent for granting certification/registration according to the IAF guidance?

<p>Implementation of corrective actions for all non-conformities (A)</p> Signup and view all the answers

What is the primary role of the accreditation body in the context of information security management systems?

<p>Accrediting certification/registration bodies for ISMS (B)</p> Signup and view all the answers

What is the primary purpose of the surveillance audit report?

<p>To verify the correction of non-conformities observed earlier (A)</p> Signup and view all the answers

What is the key requirement for the decision-taking entity in the certification/registration function?

<p>Sufficient knowledge and experience in all relevant areas (B)</p> Signup and view all the answers

What is the primary role of the certification body in the context of information security management systems?

<p>Operating third-party certification/registration systems for ISMS (D)</p> Signup and view all the answers

More Like This

Factores y Medidas en ISMS
16 questions
Introduction to ISMS
13 questions

Introduction to ISMS

HeartwarmingWilliamsite2574 avatar
HeartwarmingWilliamsite2574
ISMS Overview and Components
29 questions
Use Quizgecko on...
Browser
Browser