Which option is a family of standards for information security management systems?

Which option is a family of standards for information security management systems?

• A. Payment Card Industry Data Security Standard
• B. ISO/IEC
• C. HIPAA
• D. Sarbanes Oxley Act

Answer: (B)

A framework for managing information security across an organization is provided by the ISO/IEC family of standards. This collaboration between ISO and IEC builds a coordinated set of documents, with ISO/IEC 27001 at the core, that guides how to establish, operate, maintain, and continually improve an information security management system (ISMS). Together, these standards cover risk assessment, controls, and the ongoing PDCA (Plan-Do-Check-Act) cycle to ensure security posture evolves with threats and business needs. Other options represent specific standards or regulations rather than a broad ISMS framework. PCI DSS focuses on protecting payment card data, HIPAA addresses health information privacy and security in the US, and the Sarbanes-Oxley Act concerns financial reporting and internal controls.

A framework for managing information security across an organization is provided by the ISO/IEC family of standards. This collaboration between ISO and IEC builds a coordinated set of documents, with ISO/IEC 27001 at the core, that guides how to establish, operate, maintain, and continually improve an information security management system (ISMS). Together, these standards cover risk assessment, controls, and the ongoing PDCA (Plan-Do-Check-Act) cycle to ensure security posture evolves with threats and business needs.

Other options represent specific standards or regulations rather than a broad ISMS framework. PCI DSS focuses on protecting payment card data, HIPAA addresses health information privacy and security in the US, and the Sarbanes-Oxley Act concerns financial reporting and internal controls.