EXIN ISFS case studies
EXIN ISFS · Put your knowledge to work in context.
The EXIN Information Security Foundation based on ISO/IEC 27001 (commonly shortened to ISFS) is an entry-level certification aimed at anyone who needs a working grasp of information security concepts rather than hands-on technical depth. It suits new employees in IT and security roles, line managers, auditors, contract and HR staff, and anyone whose work touches confidential data and who must understand why security controls exist and what ISO/IEC 27001 expects of an organisation. The exam tests conceptual understanding of the core building blocks of information security: what information and information security are, the relationship between information and security, threats and risks, the value of information, and the countermeasures an organisation can take. It also covers the organisational and human side - security policy, roles and responsibilities, incident handling, business continuity, and the Plan-Do-Check-Act cycle that underpins an ISO/IEC 27001 management system. The EXIN ISFS case studies are 5 cases and about 4,806 words.
1Personal cloud storage at a 45-person agency
Meridian Creative is a 45-person marketing agency with no dedicated security staff. To share 2.8 TB of client campaign material with freelancers, the sales director opened a personal Dropbox account and invited 30 external collaborators.
969 words, about 5 min2Risk acceptance and a 'cover everything' Statement of Applicability
Trans-East Logistics has 260 employees and has completed its first ISO/IEC 27001 risk assessment. The register contains 14 risks.
953 words, about 5 min3Friday ransomware at a building-supplies wholesaler
At 17:40 on Friday, three accounts staff at a 130-person building-supplies wholesaler reported that shared-drive files had become unreadable and renamed with .locked. The ERP system was still up.
1,042 words, about 5 min4Shared-building server room and the cleaning contractor
Greenfield Data Services operates a small colocation room inside a shared office building. The room holds 18 racks, including two used by a client that processes payment-card data.
921 words, about 5 min5Scope, self-audit and an open nonconformity before certification
Havenbrook Care operates six care homes and is seeking ISO/IEC 27001 certification. The scope statement covers 'all information processing in support of care delivery'.
921 words, about 5 min