CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Security
Sahyadri Pharma Ltd wants a certifiable management system for protecting the confidentiality, integrity and availability of its information through risk-based controls, and wants an external auditor to certify it. Which standard best fits this need?
ISO/IEC 27001 is the right choice because it sets requirements for an Information Security Management System built on risk assessment, protecting confidentiality, integrity and availability, and it can be certified by an external auditor. ISO 9001 and 14001 cover quality and environment instead.
- AISO/IEC 27001Correct
- BISO 9001
- CISO 14001
- DISO 22301 only for physical plant safety
Explanation
ISO/IEC 27001 specifies requirements for an Information Security Management System (ISMS) based on risk assessment and is certifiable by external auditors. ISO 9001 addresses quality management and ISO 14001 environmental management. ISO 22301 concerns business continuity, not a general ISMS.
Did you get it right without looking?
One question tells you little. A timed set on Cyber Security shows your real accuracy, how long you take and where you lose marks.
More Cyber Security questions
- A Mumbai-based firm's payment portal is flooded with millions of fake requests from many compromised computers, making it unavailable to gen…
- Under the CERT-In Directions issued in April 2022 under the Information Technology Act, 2000, within what time must a service provider, inte…
- During a forensic investigation, an examiner computes a hash value (such as SHA-256) of a seized disk image at acquisition and again before …
- Under the CERT-In Directions issued in April 2022 under the Information Technology Act, 2000, within what time must a service provider, inte…
- Meera, a company secretary, wants to produce an email printout as evidence in an Indian court. Under the Indian law on electronic records as…
- Ravi receives an email that appears to come from his bank, asking him to click a link and enter his net-banking password to avoid account su…