medium
Single Answer
0Presenting certification that a third-party organization has validated a vendor’s practices against ISO 27001 is an example of what practice?
Answer Options
A
Internal audit
B
Vendor assessment
C
Vulnerability scanning
D
Data inventory
Correct Answer: B
Explanation
Third- party assessments of an organization’s efforts to meet ISO standards is an example of vendor assessment. Internal audit would leverage internal staff to perform an audit, vulnerability scans use technical tools to identify vulnerabilities, and data inventories identify data and its locations and uses.