You are conducting a third-party surveillance audit when another member of the audit team approaches you seeking clarification. They have been asked to assess the organisation's application of control 5.7 - Threat Intelligence. They are aware that this is one of the new controls introduced in the 2022 edition of ISO/IEC 27001, and they want to make sure they audit the control correctly. They have prepared a checklist to assist them with their audit and want you to confirm that their planned activities are aligned with the control's requirements. Which three of the following options represent valid audit trails?

Question

Accepted Answer

D. I will ensure that appropriate measures have been introduced to inform top management as to the F. I will check that threat intelligence is actively used to protect the confidentiality, integrity and G. I will review how information relating to information security threats is collected and evaluated to

Answer

A. I will ensure that the task of producing threat intelligence is assigned to the organisation's internal

Answer

B. I will ensure that the organisation's risk assessment process begins with effective threat

Answer

C. I will speak to top management to make sure all staff are aware of the importance of reporting

Answer

E. I will check that the organisation has a fully documented threat intelligence process

Answer

H. I will determine whether internal and external sources of information are used in the production of

You are conducting a third-party surveillance audit when another member of the audit team approaches you seeking clarification. They have been asked to assess the organisation's application of…

Question

Options

How the community answered

Explanation

Topics

Community Discussion