GAQM ISO 27001 : 2013 - Certified Lead Auditor - ISO27-13-001 Exam Practice Test

Which of the following does an Asset Register contain? (Choose two)

Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

Which reliability aspect of information is compromised when a staff member denies having sent a message?

A member of staff denies sending a particular message.
Which reliability aspect of information is in danger here?

Phishing is what type of Information Security Incident?

Which of the following statements are correct for Clean Desk Policy?

Which department maintain's contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.

What controls can you do to protect sensitive data in your computer when you go out for lunch?

Does the security have the right to ask you to display your ID badges and check your bags?

A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company's information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?