Question $27$ of $40$

What is the purpose of the ISO$/$IEC $27001$ standard?

to provide guidance on data backup and recovery procedures

to specify requirements for an information security management system $($ISMS$)$

to define best practices for network monitoring and intrusion detection

to outline strategies for protecting physical infrastructure