Which of the following statements about the relationship between ISO/IEC 27001 and ISO/IEC 27002 is true?
ISO/IEC 27002 provides implementation advice on the controls selected during the ISO/IEC 27001 information security risk management process
ISO/IEC 27002 provides a process for information security risk management which implements the requirements of ISO/IEC 27001
Submit