ISO 27001

Minimizing the impact of security incidents (correct)

Ensuring compliance with local regulations

Protecting against all possible security threats

Eliminating all security risks

To identify potential security vulnerabilities

To enforce disciplinary actions for non-compliance

To evaluate the effectiveness of security controls (correct)

To ensure employees understand all security policies

Information security incident management

Physical security measures

Risk assessment and treatment

Data encryption standards (correct)