Exin Information Security Foundation based on ISOIEC 27002 Set 3

If everyone works with the same account, it is impossible to find out who worked on what. Information security activities are carried out by only a few people. Too many measures are implemented. It is not possible for an organization to implement information security in a consistent manner.

Authorizing the use of an information system Creating a label that indicates how confidential the information is Defining different levels of sensitivity into which information may be arranged Displaying on the document who is permitted access

How to report an incident and to whom. Whether the incident has occurred before and what was the resulting damage. The measures that should have been taken to prevent the incident in the first place. Who is responsible for the incident and whether it was intentional.