先試後買

A. Guidance for the management of information security risks

B. Requirements for the implementation of information security controls

C. Guidance for the implementation of information security controls

A. Ensuring information has not been altered without authorization

B. Ensuring information is only seen by authorized parties

C. Ensuring information and assets are accessible and usable when needed by an authorized entity

A. ISO/IEC 20000

B. ISO/IEC 27001, Annex A

C. ISO/IEC 9001

A. 5.17 Authentication information

B. 5.18 Access rights

C. 5.16 Identity management

A. Property of accuracy and completeness

B. Property that information is not made available or disclosed to unauthorized individuals, entities, or processes

C. Property of being accessible and usable upon demand by an authorized entity

A. To ensure information security risks related to projects and deliverables are effectively addressed

B. To ensure information security audits on the project and deliverables are regularly conducted

C. To ensure the effective application of ISO/IEC 27001 principles related to projects and deliverables

A. Control 8.31 Separation of development, testing and operational environments

B. Control 5.13 Labelling of information

C. Control 6.6 Confidentiality or non-disclosure agreements

A. To detect and prevent unauthorized disclosure and extraction of information by individuals or systems

B. To classify information based on sensitivity

C. To manage user access rights