You are an experienced audit team leader conducting a third-party surveillance audit of an organisation that designs websites for its clients. You are currently reviewing the organisation's Statement

Question

Options

• AA Statement of Applicability must be produced by organisations seeking ISO/IEC 27001 conformity
• BJustification is only required for any controls that the organisations choses to exclude
• CJustification for both the inclusion and exclusion of Annex A controls in the Statement of
• DThe Statement of Applicability is owned and amended by the organisation's top management
• EAdditional controls not included in Appendix A may be added to the Statement of Applicability if the
• FThe Statement of Applicability must include Organisational, Physical, People and Technological

• A
  3% (1)
• B
  80% (32)
• C
  5% (2)
• E
  3% (1)
• F
  10% (4)

Explanation

You've hit your limit · resets 4am (America/New_York)

No community discussion yet for this question.