Question 14

Explanation

In an information security management system audit, the international standard ISO 27001 would likely be used as a criterion against which the organization's system is audited) ISO 27001 is an internationally accepted standard for information security management systems that establishes requirements and guidelines for organizations to systematically address risks related to their information processing activities. It sets out specific criteria that organizations must comply with to demonstrate compliance with