In short
International Organization for Standardization (ISO) 27001 is the international standard for an information security management system: a risk-based set of policies, processes and controls to protect information.
Key takeaways
- Organizations can be certified against it by accredited certification bodies.
- Its annex lists reference controls, with guidance in the companion standard 27002.
- Certification covers a defined scope, which users should check.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
To send a confidential message that only the intended recipient can read, which key should the sender use to encrypt it?