The primary purpose of ____ is to enable organizations to obtain certification; thus, it serves more as an assessment tool than an implementation framework.
A) ISO/IEC 27001
B) ISO/IEC 27002
C) COBIT
D) ISACA

Question

Quizplus · Accepted Answer

ISO/IEC 27001 is designed to allow organizations to establish, implement, maintain, and continuously improve an information security management system (ISMS), and it includes requirements that organizations can get certified against. This makes it more of an assessment tool compared to frameworks primarily focused on implementation guidance.

The Primary Purpose of ____ Is to Enable Organizations to Obtain