Exam 712-50 topic 1 question 315 discussion

Actual exam question from ECCouncil's 712-50

Question #: 315
Topic #: 1

Scenario: You are the newly hired Chief Information Security Officer for a company that has not previously had a senior level security practitioner. The company lacks a defined security policy and framework for their Information Security Program. Your new boss, the Chief Financial Officer, has asked you to draft an outline of a security policy and recommend an industry/sector neutral information security control framework for implementation.
Which of the following industry / sector neutral information security control frameworks should you recommend for implementation?

A. Payment Card Industry Digital Security Standard (PCI DSS)
B. National Institute of Standards and Technology (NIST) Special Publication 800-53
C. International Organization for Standardization ג€" ISO 27001/2
D. British Standard 7799 (BS7799)

Show Suggested Answer

Suggested Answer: C 🗳️

by amgpt at July 11, 2023, 5:56 p.m.

Comments

Submit Cancel

amgpt

1 year ago

I would suggest Option B as it is looking for a framework and not a standard. Option C is a standard

upvoted 2 times

...