Which of the following is the primary purpose of ISO/IEC 27001:2005?
A) Use within an organization to formulate security requirements and objectives
B) Implementation of business-enabling information security
C) Use within an organization to ensure compliance with laws and regulations
D) To enable organizations that adopt it to obtain certification

Question

Quizplus · Accepted Answer

The primary purpose of ISO/IEC 27001:2005 is to enable organizations to obtain certification, indicating that they have implemented an information security management system that complies with the standard. While it can also be used within an organization to formulate security requirements and objectives or ensure compliance with laws and regulations, these are not the primary purposes of the standard. Implementation of business-enabling information security is a general goal of information security management, but again, it is not the primary purpose of this specific standard.

Which of the Following Is the Primary Purpose of ISO/IEC