C) It is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.
B) It is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001.
Option A sounds like the right answer to me. It covers the basics of what the ISO/IEC 27002 standard is all about - a guide for good information security practices.
Dortha
3 days agoCherry
4 days agoGolda
7 days agoAnnelle
8 days ago