ISO-IEC-27001-Lead-Auditor 문제 16
다음 옵션 중 자사 감사에 참여하지 않는 두 가지 옵션은 무엇입니까?
ISO-IEC-27001-Lead-Auditor 문제 17
감사 방법은 피감사인을 대표하는 개인과의 상호 작용이 있을 수도 있고 없을 수도 있습니다. 다음 중 상호 작용 방법 중 두 가지 방법은 무엇입니까?
ISO-IEC-27001-Lead-Auditor 문제 18
You are performing an ISMS audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to verify the information security of the business continuity management process. During the audit, you learned that the organisation activated one of the business continuity plans (BCPs) to make sure the nursing service continued during the recent pandemic. You ask Service Manager to explain how the organisation manages information security during the business continuity management process.
The Service Manager presents the nursing service continuity plan for a pandemic and summarises the process as follows:
Stop the admission of any NEW residents.
70% of administration staff and 30% of medical staff will work from home.
Regular staff self-testing including submitting a negative test report 1 day BEFORE they come to the office.
Install ABC's healthcare mobile app, tracking their footprint and presenting a GREEN Health Status QR-Code for checking on the spot.
You ask the Service Manager how to prevent non-relevant family members or interested parties from accessing residents' personal data when staff work from home. The Service Manager cannot answer and suggests the n" Security Manager should help with that.
You would like to further investigate other areas to collect more audit evidence Select three options that will be in your audit trail.
The Service Manager presents the nursing service continuity plan for a pandemic and summarises the process as follows:
Stop the admission of any NEW residents.
70% of administration staff and 30% of medical staff will work from home.
Regular staff self-testing including submitting a negative test report 1 day BEFORE they come to the office.
Install ABC's healthcare mobile app, tracking their footprint and presenting a GREEN Health Status QR-Code for checking on the spot.
You ask the Service Manager how to prevent non-relevant family members or interested parties from accessing residents' personal data when staff work from home. The Service Manager cannot answer and suggests the n" Security Manager should help with that.
You would like to further investigate other areas to collect more audit evidence Select three options that will be in your audit trail.
ISO-IEC-27001-Lead-Auditor 문제 19
ISMS의 표준 정의는 무엇입니까?
ISO-IEC-27001-Lead-Auditor 문제 20
Which one of the following statements best describes the purpose of conducting a document review?