Explanation
Cabling security is associated with power, telecommunication and network cabling carrying information are protected from interception and damage. This statement is true, as cabling security is a part of physical and environmental security that aims to prevent unauthorized physical access, damage and interference to information and information processing facilities. Cabling security involves securing the cables that transmit information from one device or location to another, such as power cables, telephone cables, network cables, etc. Cabling security can prevent eavesdropping, tampering, interruption or destruction of information by physical means, such as cutting, tapping, bending or exposing the cables. ISO/IEC 27001:2022 requires the organization to implement physical and environmental security controls to prevent unauthorized physical access, damage and interference to the organization's information and information processing facilities (see clause A.11). References: CQI & IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course, ISO/IEC 27001:2022 Information technology - Security techniques - Information security management systems - Requirements, What is Cabling Security?

The option that best describes how Information Security Management System (ISMS) audits should be conducted, aligning with best practices and standards like ISO/IEC 27001:2022, is:
D: Audit methods should be used to assess objective evidence in order to generate audit findings. Then, the audit conclusion should be created and presented to the auditee at the closing meeting.

Data and information are related concepts, but they are not the same. Data are simply facts or figures that represent raw facts or figures and form the basis of information. Information is data that has been given value through analysis, interpretation, or compilation in a meaningful form. When meaning and value are assigned to data, it becomes information that can be used for decision making, problem solving, or communication. Therefore, the correct answer is C. Reference: ISO/IEC 27000:2022, clause 3.7; Data vs Information - Difference and Comparison | Diffen.