Free ISFS Questions Attempt

You are the owner of a growing company, SpeeDelivery, which provides courier services. You

decide that it is time to draw up a risk analysis for your information system. This includes an

inventory of the threats and risks. What is the relation between a threat, risk and risk analysis?

A Dutch company requests to be listed on the American Stock Exchange. Which legislation within

the scope of information security is relevant in this case?

Some threats are caused directly by people, others have a natural cause. What is an example of

an intentional human threat?

You are the owner of SpeeDelivery courier service. Because of your companys growth you have

to think about information security. You know that you have to start creating a policy. Why is it so

important to have an information security policy as a starting point?