首页
外语
计算机
考研
公务员
职业资格
财经
工程
司法
医学
专升本
自考
实用职业技能
登录
计算机
The following scenario will be used for questions 26, 27, and 28. Trent is the new manager of his company’s internal software de
The following scenario will be used for questions 26, 27, and 28. Trent is the new manager of his company’s internal software de
admin
2013-12-19
47
问题
The following scenario will be used for questions 26, 27, and 28.
Trent is the new manager of his company’s internal software development department. He has been told by his management that the group needs to be compliant with the international standard that provides guidance to organizations in integrating security into the processes used for managing their applications. His new boss told him that he should join and get familiar with the Web Application Security Consortium, and Trent just received an e-mail stating that one of the company’s currently deployed applications has a zero day vulnerability.
Which of the following is most likely the standard Trent’s company wants to comply with?
选项
A、ISO/IEC 27005
B、ISO/IEC 27001
C、ISO/IEC 27034
D、BS 7799
答案
C
解析
C正确。ISO/IEC 27034是一个国际标准,它为组织将安全性整合到用于管理应用程序的流程提供了指南。它适用于内部开发的应用程序、从第三方获得的应用程序以及应用程序的开发和运算是外包的情况。
A不正确。因为ISO/IEC 27005:2001为信息安全风险管理提供了指导方针。ISO/IEC 27005:2001支持ISO/IEC 27001,并且它的设计是为了帮助基于风险管理方法的信息安全的正确实现。
B不正确。因为ISO/IEC 27001:2005详细说明了在组织的整体业务风险的情况中,建立、实现、运行、监控、审查、维护和提高文档化的信息安全管理系统的需求。它还详细说明了依单个组织或单个组织的部分部门而定制的安全控制实现的需求。
D不正确。因为BS 7799是由英国政府的贸易与工业部所撰写的,它概述了信息安全管理体系(Information Security Management,ISMS,又叫安全项目)应该如何构建和维护。它的目的是为组织提供如何设计、实现和维护政策、过程和技术,以管理其敏感信息资产的风险提供指导方针。
转载请注明原文地址:https://jikaoti.com/ti/3EO7FFFM
0
CISSP认证
相关试题推荐
AsformercolonistsofGreatBritain,theFoundingFathersoftheUnitedStatesadoptedmuchofthelegalsystemofGreatBritai
Individualsandbusinesseshavelegalprotectionforintellectualpropertytheycreateandown.Intellectualproper【C1】______fro
Thetranslatormusthaveanexcellent,up-to-dateknowledgeofhis【C1】______languages,fullfacilityinthehandlingofhistarg
Publicrelationsisabroadsetofplannedcommunicationsaboutthecompany,includingpublicityreleases,designedtopromoteg
[A]Meetingdifferentneeds[B]Smallerisbetter[C]Betterproductmakesgreaterquantity[D]Qualityvsquantity[E]Chillyc
[A]Meetingdifferentneeds[B]Smallerisbetter[C]Betterproductmakesgreaterquantity[D]Qualityvsquantity[E]Chillyc
Twomonthsago,yougotajobasaconsultantforHumanResourceServiceCompany.Butnowyoufindthattheworkisnotwhatyou
Ifsoldieringwasforthemoney,theSpecialAirService(SAS)andtheSpecialBoatService(SBS)wouldhavedisintegratedinre
RobertF.Kennedyoncesaidthatacountry’sGDPmeasures"everythingexceptthatwhichmakeslifeworthwhile".WithBritainv
RobertF.Kennedyoncesaidthatacountry’sGDPmeasures"everythingexceptthatwhichmakeslifeworthwhile".WithBritainv
随机试题
男性,40岁,发现右颊黏膜白色斑块1个月,临床检查除右颊孤立白色斑块外未发现其他病损。你认为下列哪项提供的信息丕星以作为本病例的发病因素
抗高血压的药是抗癫痫的药是
秦律师在一起经济案件中,担任一审原告的诉讼代理人。该案上诉后,秦律师又担任原一审被告的诉讼代理人,由于需要追加第三人,二审法院将此案发回重审,秦律师又担任第三人的诉讼代理人。对秦律师的行为,应该给予什么处分?()
混凝土坝,坝段分缝分块型式可分为()。
某办公楼工程,建筑面积35000m2,地下2层,地上15层,框架筒体结构,外装修为单元式玻璃幕墙和局部干挂石材。场区自然地面标高为-2.00m,基础底标高为-6.90m,地下水位标高-7.50m,基础范围内土质为粉质黏土层。在建筑物北侧,距外墙轴线2.5m
采取抵押担保方式的,贷前调查应调查的内容不包括()。
某公司存货周转期为160天,应收账款周转期为90天,应付账款周转期为100天,则该公司现金周转期为()天。
为向A公司支付购买机器设备的货款,B公司向自己开户的C银行申请开具银行承兑汇票。C银行审核同意后,B公司依约存入C银行300万元保证金,并签发了以自己为出票人、A公司为收款人、C银行为承兑人、金额为1000万元、见票后3个月付款的银行承兑汇票,C银行在该汇
Weoftentendtoassociatesmilingastheresultofapositiveeventormood.Butresearchdemonstratesthattheactofsmiling,
Thatboywithapairofspectacleswithgold______haswonseveralscholarshipsinhisschool.
最新回复
(
0
)