Certified Incident Handler (CIH) Practice Ecam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Certified Incident Handler (CIH) Exam. Enhance your knowledge with interactive quizzes and detailed insights into cyber incident handling. Boost your exam readiness with our expert-designed questions!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which ISO standard offers storage security guidelines for organizational data?

  1. ISO/IEC 27030

  2. ISO/IEC 27040

  3. ISO/IEC 27029

  4. ISO/IEC 27044

The correct answer is: ISO/IEC 27040

The choice identifying ISO/IEC 27040 is the most appropriate because this standard specifically addresses storage security. It provides guidelines detailing how to manage, secure, and protect organizational data in storage systems, ensuring that sensitive information remains confidential and is not compromised. ISO/IEC 27040 covers various aspects of storage security, including physical security, access control, and data encryption, which are essential for safeguarding against threats to data integrity and confidentiality. In contrast, other standards in the ISO/IEC 27000 series focus on different areas. For instance, ISO/IEC 27030 deals with the security associated with cloud computing and provides guidance for organizations adopting cloud services. ISO/IEC 27029 provides guidance for the implementation of security management systems, while ISO/IEC 27044 details guidelines for incident management related to information security. Each of these standards has a unique focus, making ISO/IEC 27040 the clear choice for guidelines specifically related to storage security.