PECB
LEAD-AUDITOR · Question #178
Which option below about the ISMS scope is correct?
The correct answer is A. ISMS scope should be available as documented information. According to ISO/IEC 27001, the scope of an ISMS must be defined and documented. This documentation should include the boundaries and applicability of the information security management system, which helps in defining what information, locations, and assets are covered
ISO/IEC 27001 Documentation Requirements
Question
Which option below about the ISMS scope is correct?
Options
- AISMS scope should be available as documented information
- BISMS scope should ensure continual improvement
- CISMS scope should be compatible with the strategic orientation of the organization
How the community answered
(61 responses)- A90% (55)
- B3% (2)
- C7% (4)
Explanation
According to ISO/IEC 27001, the scope of an ISMS must be defined and documented. This documentation should include the boundaries and applicability of the information security management system, which helps in defining what information, locations, and assets are covered
Topics
#ISMS scope#documented information#ISO 27001 requirements#documentation
Community Discussion
No community discussion yet for this question.