nerdexam
PECB

LEAD-AUDITOR · Question #328

Drag and Drop Question As the ISMS audit team leader, you are conducting a second-party audit of an international logistics company on behalf of an online retailer. During the audit, one of your team

The correct answer is Risk analysis; Risk management; Risk identification; Risk evaluation; Risk mitigation; Risk transfer. You've hit your limit · resets 12:30am (America/New_York)

Conducting the Audit

Question

Drag and Drop Question As the ISMS audit team leader, you are conducting a second-party audit of an international logistics company on behalf of an online retailer. During the audit, one of your team members reports a nonconformity relating to control 5.18 (Access rights) of Appendix A of ISO/IEC 27001:2022. She found evidence that removing the server access protocols of 20 people who left in the last 3 months took up to 1 week whereas the policy required removing access within 24 hours of their departure. Complete the sentence with the best word(s), dick on the blank section you want to complete so that it is highlighted in red, and then click on the applicable text from the options below. Alternatively, you may drag and drop the option to the appropriate blank section. Answer:

Exhibit

LEAD-AUDITOR question #328 exhibit

Answer Area

Drag items

Risk transferRisk analysisRisk identificationRisk managementRisk mitigationRisk evaluation

Correct arrangement

  • Risk analysis
  • Risk management
  • Risk identification
  • Risk evaluation
  • Risk mitigation
  • Risk transfer

Explanation

You've hit your limit · resets 12:30am (America/New_York)

Topics

#access rights#ISO 27001 controls#nonconformity#risk management

Community Discussion

No community discussion yet for this question.

Full LEAD-AUDITOR Practice