ISO 27001 Overview

Question 1

Section 4.

Answer 1

Context of the Organisation

Question 2

Section 5.

Answer 2

Leadership

Question 3

Section 6.

Answer 3

Planning

Question 4

Section 7.

Answer 4

Support

Question 5

Section 8.

Answer 5

Operations

Question 6

Section 9.

Answer 6

Performance Evaluation

Question 7

Section 10.

Answer 7

Improvement

Question 8

Section 4.1

Answer 8

Understanding the organisation and its context

Question 9

Section 4.2

Answer 9

Understanding the needs and expectations of interested parties

Question 10

Section 4.3

Answer 10

Determining the scope of the information security system

Question 11

Section 4.4

Answer 11

Information Security Management System

Question 12

Section 5.1

Answer 12

Leadership and Commitment

Question 13

Section 5.2

Answer 13

Policy

Question 14

Section 5.3

Answer 14

Organisational roles, responsibilities and authorities

Question 15

Section 6.1

Answer 15

Actions to address risks and opportunities

Question 16

Section 6.1.1

Answer 16

General

Question 17

Section 6.1.2

Answer 17

Information Security Risk Assessment

Question 18

Section 6.1.3

Answer 18

Information Security Risk Treatment

Question 19

Section 6.2

Answer 19

Information Security objectives and planning to achieve them

Question 20

Section 7.1

Answer 20

Resources

Question 21

Section 7.2

Answer 21

Competence

Question 22

Section 7.3

Answer 22

Awareness

Question 23

Section 7.4

Answer 23

Communication

Question 24

Section 7.5

Answer 24

Documentation

Question 25

Section 7.5.1

Answer 25

General

Question 26

Section 7.5.2

Answer 26

Creating and updating

Question 27

Section 7.5.3

Answer 27

Control of documented Information

Question 28

Section 8.1

Answer 28

Operational Planning and control

Question 29

Section 8.2

Answer 29

Information Security Risk Assessment

Question 30

Section 8.3

Answer 30

Information Security Risk Treatment

Question 31

Section 9.1

Answer 31

Monitoring, Measurement, Analysis and Evaluation

Question 32

Section 9.2

Answer 32

Internal Audit

Question 33

Section 9.3

Answer 33

Management review

Question 34

Section 10.1

Answer 34

Nonconformity and corrective action

Question 35

Section 10.2

Answer 35

Continual Improvement