Question

In the ISO/IEC 27002 framework, the section covering _________________ describes the use and controls related to encryption.

a) Access control
b) Cryptographic controls
c) Incident response
d) Network security

Answer 1

The ISO/IEC 27002 framework's section on cryptographic controls details the use and management of encryption and related practices.

Step-by-step explanation:

In the ISO/IEC 27002 framework, the section covering cryptographic controls describes the use and controls related to encryption. The correct answer to the student's question is b) Cryptographic controls.

This section specifically deals with the principles guiding the proper use and management of cryptography within an organization to protect the confidentiality, authenticity, and integrity of information. It includes topics such as key management, encryption policies, and the secure use of cryptographic solutions.