Câu 23: Lead Implementer: PECB Certified ISO/IEC 27001 Lead Implementer

Socket Inc. has implemented a control for the effective use of cryptography and cryptographic key management. Is this compliant with ISO/IEC 27001? Refer to scenario 3.

1. A. No, the control should be implemented only for defining rules for cryptographic key management
2. B. Yes, the control for the effective use of the cryptography can include cryptographic key management — đáp án hiện tại
3. C. No, because the standard provides a separate control for cryptographic key management