Request More Information

Email:  WhatsApp:

koenig-logo

ISO/IEC 27001 Lead Implementer Quiz Questions and Answers

Answer :
  • Organizations can obtain certification against ISO/IEC 27001

Explanation :

Organizations can obtain certification against ISO standards that specify requirements (also referred to as normative standards), but not against ISO standards that provide guidelines. ISO/IEC 27001 is a normative standard and, as such, organizations can obtain certification against it. On the other hand, ISO/IEC 27005 is a guideline standard and therefore organizations cannot obtain certification against it.
Answer :
  • The ISMS should be integrated into existing processes of the organization

Explanation :

The initial system should be designed with the technology that is already in place within the organization; the optimization of the ISMS with more efficient technologies can be completed in the continual improvement phase. Roles and responsibilities of all interested parties should be defined early in the implementation process.
Answer :
  • Specific, Measurable, Attainable, Realistic, and Timely

Explanation :

SMART stands for: specific: clear and focused to avoid misconception; measurable: quantified and comparable to other data; attainable: achievable, reasonable, and acceptable in a particular context; realistic: fits into the organization’s culture and is cost-effective; timely: achievable within the set time frame.
Answer :
  • FALSE

Explanation :

Second- and third-party audits are external audits. Second party audits are conducted by parties that have an interest in the audited organization. Third party audits are conducted by external and independent audit organizations. Internal audits, on the other hands, are known as first party audits
Answer :
  • A unique process consisting of a set of coordinated and controlled activities

Explanation :

According to ISO 9000, a project is defined as a unique process consisting of a set of coordinated and controlled activities with start and finish dates, undertaken to achieve an objective conforming to specific requirements, including the constraints of time, cost, and resources.