ISO 17799 Has Two Parts

question 116

Multiple Choice

ISO 17799 has two parts. The first part is an implementation guide with guidelines on how to build a comprehensive information security infrastructure and the second part is an auditing guide based on requirements that must be met for an organization to be deemed compliant with ISO 17799. What are the ISO 17799 domains? Each correct answer represents a complete solution. Choose all that apply.

• A) Information security policy for the organization
• B) System architecture management
• C) Business continuity management
• D) System development and maintenance
• E) Personnel security

---

Definitions:

Consumer Psychology

Branch of psychology that studies the habits of consumers in the marketplace.

Organizational

Pertaining to the structure or arrangement of parts within a system, often referring to entities like businesses or institutions and how they are managed.

Door-In-The-Face Technique

A persuasion strategy whereby a large, likely-to-be-rejected request is made first with the goal of making a smaller request seem more reasonable by comparison.

Foot-In-The-Door Technique

A persuasion strategy where a person is led to agree to a small request first, making them more likely to comply with a larger request later.