A company wants to demonstrate to its customers that it has a robust information security program. The company is considering ISO 27001 certification, but the process is expensive and time-consuming. The company also wants to align with the NIST Cybersecurity Framework. Which approach is most effective?

Choose NIST CSF instead of ISO 27001 to save money and still get certified

Implement ISO 27001 and ignore NIST CSF because they are redundant

Use PCI DSS as a substitute for both frameworks

Implement ISO 27001 controls and use the NIST CSF to communicate security posture to customers

EC-CouncilEthical Hacking Essentials

Domain 1Objective 4

Information Security Laws, Regulations, and Standards EHE Practice Questions (Page 10)

Part of the Information Security and Ethical Hacking Foundations domain, which makes up ~16% of our current practice bank.

46questions here

10free pages

4concepts

Questions 46–46

46expert · hard
A company wants to demonstrate to its customers that it has a robust information security program. The company is considering ISO 27001 certification, but the process is expensive and time-consuming. The company also wants to align with the NIST Cybersecurity Framework. Which approach is most effective?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Information Security Laws, Regulations, and Standards EHE Practice Questions (Page 10)

Questions 46–46

Keep studying — Information Security and Ethical Hacking Foundations