PECB
LEAD-AUDITOR · Question #178
LEAD-AUDITOR Question #178: Real Exam Question with Answer & Explanation
The correct answer is A. ISMS scope should be available as documented information. According to ISO/IEC 27001, the scope of an ISMS must be defined and documented. This documentation should include the boundaries and applicability of the information security management system, which helps in defining what information, locations, and assets are covered
Question
Which option below about the ISMS scope is correct?
Options
- AISMS scope should be available as documented information
- BISMS scope should ensure continual improvement
- CISMS scope should be compatible with the strategic orientation of the organization
Explanation
According to ISO/IEC 27001, the scope of an ISMS must be defined and documented. This documentation should include the boundaries and applicability of the information security management system, which helps in defining what information, locations, and assets are covered
Community Discussion
No community discussion yet for this question.