ISO 27001 Readiness

What are the 3 objectives of ISMS (Information Security Management System)?

Ensure no leakage, loss or missing of customers’ information

Ensure reuse and recycling of paper containing sensitive information

Ensure compliance to ISMS policies eg. No use of unauthorised freeware

Implement appropriate information education / training procedures

What should you do if you own a mobile device containing company data? (You can select more than 1 option)

Must not leave mobile computing device unattended whilst travelling

Allow your best friend to borrow it over the weekend

You share your device and email account passwords with your significant other as there is nothing to hide between the both of you

Must not leave mobile computing device unattended in hotel rooms, client sites, vehicles, etc

Ensure that the theft of mobile computing device is immediately reported to IT Office and immediately deactivate the account.

All sensitive / confidential documents need to be encrypted with #yourHPno.# or the designated code assigned.

True

False

What happens to a staff if he / she does not conform to ISO Standards? (You can select more than 1 option)

Warning & Final Warnings

Fines / Penalty

Immediate dismissal

Charged with legal lawsuit based on Computer Misuse Act / Breach of PDPA

Which of the below are examples of Social Engineering?

Receiving an email from an unknown source asking for your details

An unknown caller / source calls you to ask to reveal your bank account no. For verification purposes

Link shorteners or embed links that redirect users to suspicious websites in URLs that appear legitimate

Unlock and Upgrade