When Assessing an Organization's Security Policy According to Standards Established

question 257

Multiple Choice

When assessing an organization's security policy according to standards established by the International Organization for Standardization (ISO) 27001 and 27002, when can management responsibilities be defined?

• A) Only when assets are clearly defined
• B) Only when standards are defined
• C) Only when controls are put in place
• D) Only procedures are defined

---

Definitions:

Bandura's Theory

Refers to the social learning theory, which emphasizes the importance of observing, modeling, and imitating the behaviors of others.

Bandura

Refers to Albert Bandura, a psychologist who is best known for his social learning theory and the concept of self-efficacy.

Congressional Hearing

A formal meeting or session of a U.S. congressional committee to gather information, witness testimonies, or discuss legislation.

Observational Learning

Learning that occurs by watching the actions of others and the consequences of those actions, also known as social learning or modeling.