medium
Single Answer
0

Presenting certification that a third-party organization has validated a vendor’s practices against ISO 27001 is an example of what practice?

Answer Options

A

Internal audit

B

Vendor assessment

C

Vulnerability scanning

D

Data inventory

Correct Answer: B

Explanation

Third- party assessments of an organization’s efforts to meet ISO standards is an example of vendor assessment. Internal audit would leverage internal staff to perform an audit, vulnerability scans use technical tools to identify vulnerabilities, and data inventories identify data and its locations and uses.