Exin ISMP Exam Dumps

What is the best way to start setting the information security controls?

• Implement the security measures as prescribed by a risk analysis tool
  
• Resort back to the default factory standards
  
• Use a standard security baseline
  

Security monitoring is an important control measure to make sure that the required security level is maintained. In order to realize 24/7 availability of the service, this service is outsourced to a partner in the cloud.What should be an important control in the contract?

• The network communication channel is secured by using encryption.
  
• The third party is certified against ISO/IEC 27001.
  
• The third party is certified for adhering to privacy protection controls.
  
• Your IT auditor has the right to audit the external party's service management processes.
  

What needs to be decided prior to considering the treatment of risks?

• Criteria for determining whether or not the risk can be accepted
  
• How to apply appropriate controls to reduce the risks
  
• Mitigation plans
  
• The development of own guidelines
  

The information security manager is writing the Information Security Management System (ISMS) documentation. The controls that are to be implemented must be described in one of the phases of the Plan-Do-Check-Act (PDCA) cycle of the ISMS.In which phase should these controls be described?

• Plan
  
• Do
  
• Check
  
• Act
  

The ambition of the security manager is to certify the organization against ISO/IEC 27001.What is an activity in the certification program?

• Formulate the security requirements in the outsourcing contracts
  
• Implement the security baselines in Secure Systems Development Life Cycle (SecSDLC)
  
• Perform a risk assessment of the secure internet connectivity architecture of the datacenter
  
• Produce a Statement of Applicability based on risk assessments