ITPEC IP April 2018 Question 39
ITPEC IP April 2018 — Question 39 of 100
ISMS certification assesses an information security management system, and the certification is performed by an independent third-party institution. External assessment provides impartial assurance that the organization's ISMS is established and operated in conformity with the certification standard.
Answer (d)
Why not others:
- ISMS stands for information security management system, not personal information protection management system
- an organization's internal audit department can review the ISMS but cannot provide the independent certification described
Key rule: Internal audits support continual improvement; accredited external certification bodies conduct conformity assessment for ISMS certification.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.