1) Do you know the Risk and Controls? 2) Map five risks with its controls? 3) What is SOD? Explain in terms of change management. 4) What is ISO 27001? 5) Explain the audit procedure in terms of ISO 27001? 6) How will you mitigate the risk? 7) explain the risk management process. 8) What are the differences between ISO 31000 ISO 27005? 9) What will you do if you the evidences are not covering the audit period? 10) Scenario based questions...