When Assessing an Organization's Security Policy According to Standards Established

question 257

Multiple Choice

When assessing an organization's security policy according to standards established by the International Organization for Standardization (ISO) 27001 and 27002, when can management responsibilities be defined?

• A) Only when assets are clearly defined
• B) Only when standards are defined
• C) Only when controls are put in place
• D) Only procedures are defined

---

Definitions:

Anticipated

Expected or predicted, often used in contexts where outcomes or events are seen as probable based on current information or trends.

Investment Tax Credit

a tax incentive that allows businesses to deduct a certain percentage of the amount invested in assets or projects from their tax liability.

Investment Goods

Long-term assets purchased for the purpose of generating income, growth, and/or value appreciation.

Interest Rate

The percentage charged on borrowed money, or earned through savings and investments, reflecting the cost of borrowing or the benefit of saving.