BBB GRC Platform

Q1

A. A quality management standard B. An international standard for Information Security Management Systems (ISMS) C. A financial reporting standard D. A software development methodology

Q2

A. Information Safety Management System B. International Security Management Standard C. Information Security Management System D. Integrated Security Monitoring Service

Q3

A. Self-declaration only B. An external audit by an accredited certification body C. Government approval D. EU registration

Q4

A. Project management phases B. The continual improvement cycle for the ISMS C. Software development stages D. Financial planning process

Q5

A. Certification fees B. 93 controls across 4 themes (Organisational, People, Physical, Technological) C. A list of certified companies D. Definitions only

Q6

A. All company IT assets B. Which Annex A controls are applicable and why, including justification for exclusions C. Staff security training records D. Incident response procedures

Q7

A. Accept or reject B. Modify, retain, avoid or share the risk C. Encrypt or delete D. Report or escalate

Q8

A. Only before certification B. Never C. At planned intervals to assess conformance D. Only when incidents occur

Q9

A. Daily B. At planned intervals (typically annually) C. Only when a major incident occurs D. Never — it is automatic

Q10

A. 1 year B. 3 years with annual surveillance audits C. 5 years D. Indefinitely