ITPEC IP April 2025 Question 74
Among information processing standards, which of the following is defined for information security management?
Explanation
ISO/IEC 27001 — it specifies the requirements for an information security management system (ISMS).
ISO/IEC 27001 sets out what an organization needs to establish, implement, maintain and continually improve an ISMS: a security policy, risk assessment and risk treatment, controls, internal audit and management review, run as a PDCA cycle. Organizations are certified against it. The related ISO/IEC 27002 gives guidance on the controls themselves.
Answer (b)
Why not others:
- •(a) IEEE 802.3 — the IEEE standard for wired LANs (Ethernet)
- •(c) JPEG 2000 — a compression standard for still images, the successor to JPEG
- •(d) MPEG 1 — a compression standard for video and audio, the origin of MP3 (MPEG-1 Audio Layer III)
Key rule: Recognize a standard by its family: the ISO/IEC 27000 series for information security management, ISO 9001 for quality management, ISO 14001 for environmental management, IEEE 802 for LANs.
Legal Affairs · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.