ITPEC IP October 2025 Question 78
Which of the following is the international standardization organization that engages in standardization of information security management systems and quality management systems?
Explanation
ISO — the International Organization for Standardization publishes ISO 9001 for quality management systems and, with IEC, ISO/IEC 27001 for information security management systems.
ISO is a worldwide federation of national standards bodies, based in Geneva. Its management-system standards include ISO 9001 (quality), ISO 14001 (environment) and ISO/IEC 27001 (information security, the ISMS standard). The question asks for an international organization, which rules out the national and regional bodies among the options.
Answer (c)
Why not others:
- •(a) ANSI — the American National Standards Institute coordinates standards for the USA only
- •(b) CEN — the European Committee for Standardization, a regional body for Europe
- •(d) JIS — Japanese Industrial Standards, the national standards of Japan, not an international organization
Key rule: ISO is international, ANSI the USA, CEN Europe and JIS Japan; the ISMS standard is ISO/IEC 27001 and the quality management standard ISO 9001.
Legal Affairs · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.