ISO 27002 quiz part 1

What does the Information Security Policy describe?

In the context of contact with special interest groups, any information sharing agreements should identify requirements for the protection of [blank_start]confidential[blank_end] information.

Responsibilities for information security in projects should be defined and allocated to:

Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered

Prior to employment, [blank_start]screening[blank_end] as well as terms & conditions of employment are included as controls in ISO 27002 to ensure that employees and contractors understand their responsibilities and are suitable for the roles for which they are considered.

It is allowed that employees and contractors are provided with an anonymous reporting channel to report violations of information security policies or procedures (“whistle blowing”)

The identified owner of an asset is always an individual

Who is accountable to classify information assets?

Physical labels and [blank_start]metadata[blank_end] are two common forms of labelling which are mentioned in ISO 27002.

What should be used to protect data on removable media if data confidentiality or integrity are important considerations?