nerdexam
PECB

ISO-IEC-27001-LEAD-AUDITOR · Question #262

Which of the options below presents a minor nonconformity?

The correct answer is C. The backup of data is performed once a month, while the company's procedure requires daily. This is a minor nonconformity. The backup frequency not adhering to the company's procedure of daily backups but occurring once a month represents a deviation from established processes, yet it might not immediately impact the effectiveness of the information security…

Closing the audit

Question

Which of the options below presents a minor nonconformity?

Options

  • AThe risk assessment methodology prevents evaluation of information security risks
  • BThe contract of the company with its supplier does not have the appropriate document version
  • CThe backup of data is performed once a month, while the company's procedure requires daily

How the community answered

(59 responses)
  • A
    14% (8)
  • B
    7% (4)
  • C
    80% (47)

Explanation

This is a minor nonconformity. The backup frequency not adhering to the company's procedure of daily backups but occurring once a month represents a deviation from established processes, yet it might not immediately impact the effectiveness of the information security management system.

Topics

#minor nonconformity#nonconformity classification#backup procedure#document version control

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice