ISC2 CC

Laws, Standards and Ethics

12 of 60 questions in the app

Rules within the organization

  1. What is a security policy? Easy
  2. What does a procedure describe? Easy
  3. What characterizes a guideline? Easy
  4. What does an internal security standard specify? Easy

Laws and regulations

  1. Which set of rules governs the protection of personal data in the EU? Easy
  2. Under the GDPR, who is responsible for complying with data protection in a processing operation? Easy
  3. What is PCI DSS? Easy
  4. How does a law differ from a standard such as ISO/IEC 27001? Easy

Rules within the organization

  1. Which documents are usually binding within a company? Medium
  2. A company states: "All laptops are encrypted." A second document adds: "256-bit AES is used." How are the two documents classified? Medium

Professional ethics

  1. A security professional discovers that his employer is concealing a vulnerability in a control system for the drinking water supply to save costs. Which canon of the ISC2 Code of Ethics takes precedence here? Hard
  2. A colleague asks you to write down a question from your ISC2 exam so that he can study better. How do you respond? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications