MCT BEGINNING

1. Response to an incident includes, among other things:

• Taking operational incidents into account
• Taking into account incidents detected by users
• Lessons learned
• Follow-up
• Classification (level of severity)
• Treatment of root causes

2. Assessing the risks allows us to:

• Identify the risks
• Analyze the risks
• Assess the risks
• Achieve the objectives of the ISMS
• Avoid risks

3. The treatment of nonconformities includes activities such as:

• Identifying nonconformities
• Applying a correction
• Determining root causes
• Responding to an incident
• Seeking opportunities for improvement
• Evaluating the need for corrective actions

4. The internal audit:

• Check staff competence
• Helps to raise awareness among staff
• Allows disciplinary actions to be taken
• Allows the compliance of the ISMS to be evaluated
• Allows the effectiveness of the ISMS to be evaluated
• Helps improve the effectiveness of the ISMS

5. Staff are regularly made aware of:

• Information security risks
• The level of password security
• Disciplinary rules
• Updates to policies and procedures
• The scope of the ISMS