What is Information Security Management System (ISMS)

Assignment Task

Questions

1. The first step towards the implementation of an ISMS (Information Security Management System) in an organisation is to define its boundaries to define the ISMS scope. 

2. Discuss two advantages of defining an ISMS scope.

3. Discuss two relevant things that should be considered when defining an ISMS scope. Your discussion should be related to the XYZ-VISA scenario in the Appendix.

4. Explain two differences between the in-scope and out-of-scope area. You should use examples related to the XYZ-VISA scenario in the Appendix in your explanation.

5. Explain one drawback and one advantage of narrow ISMS scope.

6. Provide and justify two in-scope and two out-of-scope elements from the scenario in Appendix A.

7. One of the most important steps during risk assessment is evaluating the assets in the organization.

8. Critically discuss three differences between primary and secondary assets?

9. List and justify two primary and three secondary assets from the scenario in Appendix A.

10. List the two steps of risk assessment under ISO 27005, and explain each step using the XYZ-VISA scenario.

11. List the two steps of risk assessment under NIST SP800-30, and explain each step using the XYZ-VISA scenario.

12. Critically discuss two differences between ISO 27005 and NIST SP800-30

13. Explain each of three phases of the PDCA (Plan-Do-Check-Act) process prescribed by the ISO 27001 standard for information security management.

14. Consider the XYZ-VISA scenario in Appendix A. Describe one example of activities performed in each of the 5 generic phases of risk assessment preparation risk identification risk analysis risk evaluation and risk treatment. Your examples have to be related to the given scenario.

This IT and Computer Science has been solved by our PHD Experts at My Uni Paper.