The SEC created ISO 27002 to assist corporations with enhancing their Internal Control Standards.

Question

Quizplus · Accepted Answer

ISO 27002, also known as the Information technology – Security techniques – Code of practice for information security controls, was developed by the International Organization for Standardization (ISO) and not the SEC (Securities and Exchange Commission). It provides guidelines and best practices for information security management systems, including internal control standards.

The SEC Created ISO 27002 to Assist Corporations with Enhancing