ISO-IEC-27001-LEAD-AUDITOR · Question #309
Which of the following statements regarding documented information in an organization's ISMS is incorrect?
The correct answer is B. The collection of documented information should be a target in itself. ISO/IEC 27001:2022 Clause 7.5 (Documented Information) defines the role of documentation in Collecting documented information is not a goal in itself. The purpose of documentation is to support the ISMS and ensure compliance, not just to generate paperwork. Thus, documentation…
Question
Which of the following statements regarding documented information in an organization's ISMS is incorrect?
Options
- AThe purpose of documented information is to guide the ISMS operation and provide evidence of
- BThe collection of documented information should be a target in itself
- CDocumented information should not be detailed and complex to ensure thoroughness
How the community answered
(43 responses)- A2% (1)
- B91% (39)
- C7% (3)
Explanation
ISO/IEC 27001:2022 Clause 7.5 (Documented Information) defines the role of documentation in Collecting documented information is not a goal in itself. The purpose of documentation is to support the ISMS and ensure compliance, not just to generate paperwork. Thus, documentation should be purposeful and functional, not just a bureaucratic requirement.
Topics
Community Discussion
No community discussion yet for this question.