Improving Holistic View of an ISMS CT-STE Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   What is the primary purpose of an Information Security Management System (ISMS)?

   • ATo replace the need for technical security controls such as firewalls and encryption
   • BTo provide a one-time security audit and certification for an organization
   • CTo ensure that all security incidents are prevented from occurring
   • DTo establish, implement, operate, monitor, review, maintain, and improve the security of information assets
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a key consideration when communicating security testing results to different stakeholders within an ISMS?

   • AProviding the same detailed technical report to all stakeholders
   • BCommunicating only the positive results to maintain stakeholder confidence
   • CTailoring the communication to the audience's level of technical knowledge and interests
   • DCommunicating results only to the security testing team
   Reveal Solution Discussion Select an answer first