CCSP ISO Standards

Question 1

ISO 31000

Answer 1

Risk management — Guidelines

Question 2

ISO/IEC 11889

Answer 2

Information technology — Trusted Platform Module (TPM)

Question 3

ISO/IEC 15408

Answer 3

Information technology — Security techniques — Evaluation criteria for IT security (Common Criteria)

Question 4

ISO/IEC 17788

Answer 4

Information technology — Cloud computing — Overview and vocabulary

Question 5

ISO/IEC 17789

Answer 5

Information technology — Cloud computing — Reference architecture (CCRA)

Question 6

ISO/IEC 19086

Answer 6

Cloud computing — Service level agreement (SLA) framework

Question 7

ISO/IEC 19941

Answer 7

Information technology — Cloud computing — Interoperability and portability

Question 8

ISO/IEC 19944

Answer 8

Information technology — Cloud computing — Cloud services and devices: Data flow, data categories and data use

Question 9

ISO/IEC 20000

Answer 9

Information technology — Service management (System) (SMS)

Question 10

ISO/IEC 20933

Answer 10

Information technology — Distributed application platforms and services (DAPS) — Framework for distributed real-time access systems

Question 11

ISO/IEC 22237

Answer 11

Information technology — Data centre facilities and infrastructures

Question 12

ISO/IEC 22301

Answer 12

Security and resilience — Business continuity management systems — Requirements

Question 13

ISO/IEC 27001

Answer 13

Information technology — Security techniques — Information security management systems — Requirements

Question 14

ISO/IEC 27002

Answer 14

Information technology — Security techniques — Code of practice for information security controls

Question 15

ISO/IEC 27004

Answer 15

Information technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluation

Question 16

ISO/IEC 27017

Answer 16

Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services

Question 17

ISO/IEC 27018

Answer 17

Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors

Question 18

ISO/IEC 27034

Answer 18

Information technology — Application security

Question 19

ISO/IEC 27036

Answer 19

Information technology — Security techniques — Information security for supplier relationships

Question 20

ISO/IEC 27037

Answer 20

Information technology — Security techniques — Guidelines for identification, collection, acquisition and preservation of digital evidence

Question 21

ISO/IEC 27050

Answer 21

Information technology — Electronic discovery

Question 22

ISO 28000:2007

Answer 22

Specification for security management systems for the supply chain