Request More Information

Email:  WhatsApp:

koenig-logo

ISO/IEC 27001 Lead Implementer (PECB) Quiz Questions and Answers

Answer :
  • Organizations can obtain certification against ISO/IEC 27001

Explanation :

Organizations can obtain certification against ISO standards that specify requirements (also referred to as normative standards), but not against ISO standards that provide guidelines. ISO/IEC 27001 is a normative standard and, as such, organizations can obtain certification against it. On the other hand, ISO/IEC 27005 is a guideline standard and therefore organizations cannot obtain certification against it.
Answer :
  • The ISMS should be integrated into existing processes of the organization

Explanation :

The initial system should be designed with the technology that is already in place within the organization; the optimization of the ISMS with more efficient technologies can be completed in the continual improvement phase. Roles and responsibilities of all interested parties should be defined early in the implementation process.
Answer :
  • Specific, Measurable, Attainable, Realistic, and Timely

Explanation :

SMART stands for: specific: clear and focused to avoid misconception; measurable: quantified and comparable to other data; attainable: achievable, reasonable, and acceptable in a particular context; realistic: fits into the organization’s culture and is cost-effective; timely: achievable within the set time frame.
Answer :
  • FALSE

Explanation :

Second- and third-party audits are external audits. Second party audits are conducted by parties that have an interest in the audited organization. Third party audits are conducted by external and independent audit organizations. Internal audits, on the other hands, are known as first party audits
Answer :
  • A tool that promotes ISO/IEC 27001

Explanation :

A business case is a tool that helps planning and decision-making, including decisions regarding the opportunities, choices, and the right time to initiate an action or a sequence of actions. A business case promotes the ISMS project, not the ISO/IEC 27001 standard