ISMP is the Exin exam Information Security Management Professional based on ISO/IEC 27001. Paid practice material for this exam is not available yet, but you can try its free sample questions.
Taken from the free sample set for ISMP.
When should information security controls be considered?
After the risk assessment
As part of the scoping meeting
At the kick-off meeting
During the risk assessment work
Correct answer: A
What is a risk treatment strategy?
Mobile updates
Risk acceptance
Risk exclusion
Software installation
Correct answer: B