ITPEC IP April 2026 Question 78
Which of the following is standardized by ISO (International Organization for Standardization)?
Explanation
Information security management system — the ISO/IEC 27000 series standardizes the ISMS.
The 27000 family, published jointly by ISO and IEC, covers information security management: ISO/IEC 27000 gives the overview and vocabulary, ISO/IEC 27001 the requirements an organization's ISMS must meet to be certified, and ISO/IEC 27002 the code of practice for security controls. An ISMS protects the confidentiality, integrity and availability of information and improves through a PDCA cycle.
Answer (b)
Why not others:
- •(a) Content management system — a CMS is software for creating and publishing Web content, not a subject of the 27000 series
- •(c) Talent management system — an HR system for managing employees' skills, evaluation and careers
- •(d) Knowledge management system — a mechanism for sharing knowledge in an organization; its management-system standard is ISO 30401, not the 27000 series
Key rule: Match management-system standards by number: ISO 9001 quality, ISO 14001 environment, ISO/IEC 20000 IT service management, ISO/IEC 27001 information security (ISMS).
Legal Affairs · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.