Question 79

The framework for building a security management system specified in BS 7799-2 consists of steps through below. What is the correct order of these steps?

Select and/or add management objectives and management measures to be implemented.
Determine the scope of the information security management system.
Create an implementation declaration.
Define security policies.
Conduct a risk assessment.
Manage risks

a) →→→→→
b) →→→→→
c) →→→→→
d) →→→→→

answer