7CCSMSEM
Security Management
Tutorial Weeks 4 and 5
Question 1. Name and explain one of the main challenges to conduct risk management.
Question 2. What is an information Security Management System (ISMS)?
Question 3. Does ISO27005 recommend a method for risk assessment? Explain.
Question 4. Does the process of certification against ISO27000-series include a vulnerability assessment (e.g. using assurance techniques)? Explain.
Question 5. Explain one advantage and one disadvantage of the global information infrastructure.
Question 6. What is a Market for Lemons and how does it apply to security economics?