首页
外语
计算机
考研
公务员
职业资格
财经
工程
司法
医学
专升本
自考
实用职业技能
登录
计算机
The following scenario will be used for questions 26, 27, and 28. Trent is the new manager of his company’s internal software de
The following scenario will be used for questions 26, 27, and 28. Trent is the new manager of his company’s internal software de
admin
2013-12-19
79
问题
The following scenario will be used for questions 26, 27, and 28.
Trent is the new manager of his company’s internal software development department. He has been told by his management that the group needs to be compliant with the international standard that provides guidance to organizations in integrating security into the processes used for managing their applications. His new boss told him that he should join and get familiar with the Web Application Security Consortium, and Trent just received an e-mail stating that one of the company’s currently deployed applications has a zero day vulnerability.
Which of the following is most likely the standard Trent’s company wants to comply with?
选项
A、ISO/IEC 27005
B、ISO/IEC 27001
C、ISO/IEC 27034
D、BS 7799
答案
C
解析
C正确。ISO/IEC 27034是一个国际标准,它为组织将安全性整合到用于管理应用程序的流程提供了指南。它适用于内部开发的应用程序、从第三方获得的应用程序以及应用程序的开发和运算是外包的情况。
A不正确。因为ISO/IEC 27005:2001为信息安全风险管理提供了指导方针。ISO/IEC 27005:2001支持ISO/IEC 27001,并且它的设计是为了帮助基于风险管理方法的信息安全的正确实现。
B不正确。因为ISO/IEC 27001:2005详细说明了在组织的整体业务风险的情况中,建立、实现、运行、监控、审查、维护和提高文档化的信息安全管理系统的需求。它还详细说明了依单个组织或单个组织的部分部门而定制的安全控制实现的需求。
D不正确。因为BS 7799是由英国政府的贸易与工业部所撰写的,它概述了信息安全管理体系(Information Security Management,ISMS,又叫安全项目)应该如何构建和维护。它的目的是为组织提供如何设计、实现和维护政策、过程和技术,以管理其敏感信息资产的风险提供指导方针。
转载请注明原文地址:https://kaotiyun.com/show/lNhZ777K
0
CISSP认证
相关试题推荐
Salt,shellsormetalsarestillusedasmoneyinout-the-waypartsoftheworldtoday.Saltmayseemratherastrange【C1】__
AsformercolonistsofGreatBritain,theFoundingFathersoftheUnitedStatesadoptedmuchofthelegalsystemofGreatBritai
Backinthe1990s,awell-knowncomputerscientisthadanunusualwayofintroducinghimselftowomen.Accordingtoindustrylor
TheAffordableCareAct,betterknownasObamacare,wassupposedtotransformAmericanhealthinsurance.Criticshavelongfeare
Writeanessayof160-200wordsbasedonthefollowingdrawing.Inyouressay,youshould1)describethedrawingbriefly,
Writeanessayof160-200wordsbasedonthefollowingdrawing.Inyouressay,youshould1)describethedrawingbriefly,
Writeanessayof160-200wordsbasedonthefollowingdrawing.Inyouressay,youshould1.describethedrawingbriefly,2.e
Howmenfirstlearnedtoinventwordsisunknown;inotherwords,theoriginoflanguageisamystery.Allwereallyknowistha
Theconceptofmanversusmachineisatleastasoldastheindustrialrevolution,butthisphenomenontendstobemostacutely
YouhavelosttheoriginalofyourundergraduatediplomainBusinessAdministration.Writealettertothesecretaryofthedepa
随机试题
卖方控制型营销策略
Alltheusefulenergyatthesurfaceoftheearthcomesfromtheactivityofthesun.Thesunheatsandfeedsmankind.Eachyear
下列选项中,不属于抗辩事由应当具备的要件的是()。
房地产经纪人从事居间经纪人活动,下列选项正确的是()。
背景资料:西湖中桥是一座长15m的钢筋混凝土整体式简支梁桥,桥宽9.5m,重力式桥台。桥位处地质覆盖层为2m厚的强风化泥岩。桥台持力层为中风化泥岩。桥梁顶面距自然地面线的平均高度为8m。在距桥3km处有一个大型水泥厂,混凝土所需用的砂石级配良好。施工
以下属于寿险契约保全工作应当遵循的原则的是( )。
属于绝密级的统计资料,必须发表时,先征得有关部门同意,全国性数字由国家统计局批准,地方性数字由地方人民政府统计局批准。()
难以认定受益对象的非货币性福利,直接计入当期损益和应付职工薪酬。()
日本拉链大王吉田忠雄曾说:“不为别人的利益着想,就不会有自己的繁荣。”这句话的意思是()。
Friendisbetterthanfortune.Friendisworsethanpoisoninsome【C1】______.Theabovetwostatementsareoppositeandseemto
最新回复
(
0
)