Episode 39 — A.5.33–5.34 — Protection of records; Privacy & PII protection
A.5.33 mandates that records—authoritative evidence of activities performed—are protected so they remain authentic, reliable, and usable for as long as needed. For the exam, note the required controls...
14 Okt 202514min
Episode 38 — A.5.31–5.32 — Legal/regulatory/contractual; Intellectual property rights
A.5.31 requires organizations to identify and comply with all applicable legal, regulatory, and contractual requirements related to information security. For the exam, emphasize traceability: you need...
14 Okt 202514min
Episode 37 — A.5.29–5.30 — Security during disruption; ICT readiness for BC
A.5.29 focuses on maintaining information security when normal operations are disrupted, such as during disasters, severe outages, or crisis events. For the exam, remember that protection objectives d...
14 Okt 202513min
Episode 36 — A.5.27–5.28 — Learning from incidents; Collection of evidence
A.5.27 requires organizations to institutionalize learning from incidents, transforming individual events into durable improvements. For the exam, emphasize that “learning” goes beyond a retrospective...
14 Okt 202513min
Episode 35 — A.5.25–5.26 — Event assessment/decision; Incident response
A.5.25 establishes a disciplined mechanism to assess events and decide whether they constitute information security incidents, preventing alert fatigue and ensuring consistent prioritization. For exam...
14 Okt 202515min
Episode 34 — A.5.23–5.24 — Use of cloud services; Incident mgmt planning & prep
A.5.23 focuses on governing the use of cloud services so that risk treatment is consistent with enterprise policy and legal obligations. For the exam, explain that governance spans service selection, ...
14 Okt 202514min
Episode 33 — A.5.21–5.22 — ICT supply chain; Monitoring/review of supplier services
A.5.21 extends supplier governance to the broader ICT supply chain, recognizing that products and services depend on multiple tiers of vendors, firmware, open-source components, and logistics. For exa...
14 Okt 202516min
Episode 32 — A.5.19–5.20 — Supplier relationships; Supplier agreements
A.5.19 establishes that supplier relationships must be governed to protect the organization’s information and services. For the exam, focus on risk-based segmentation of suppliers—by data sensitivity,...
14 Okt 202514min
