nerdexam
PECB

LEAD-AUDITOR · Question #341

Drag and Drop Question You are performing an ISMS audit at a European-based residential nursing home called ABC that provides healthcare services. The next step in your audit plan is to verify the eff

The correct answer is Incident identification - Identify the incident to initiate. High, medium, low; Incident categorization - Determine whether the incident is a major or minor incident, and classify it as software, hardware, or a network incident. A major incident would be considered an incident; Task creation and management - Create and assign tasks, and monitor their status, to resolve the incident; SLA management and escalation - Ensure the incident is addressed within the agreed SLA. If not, escalation to management or a higher level may be necessary. If it; Incident escalation - A temporary workaround has been identified; Problem identification - Identify problems that are related to the incident and work towards permanent resolution. You've hit your limit · resets 12:30am (America/New_York)

Conducting an ISO/IEC 27001 Audit

Question

Drag and Drop Question You are performing an ISMS audit at a European-based residential nursing home called ABC that provides healthcare services. The next step in your audit plan is to verify the effectiveness of the continual improvement process. During the audit, you learned most of the residents' family members (90%) receive WeCare medical devices promotion advertisements through email and SMS once a week via ABC's healthcare mobile app. All of them do not agree on the use of the collected personal data for marketing or any other purposes than nursing and medical care on the signed service agreement with ABC. They have very strong reason to believe that ABC is leaking residents' and family members' personal information to a non-relevant third party and they have filed complaints. The Service Manager says that, after investigation, all these complaints have been treated as nonconformities. The corrective actions have been planned and implemented according to the nonconformity and corrective management procedure (Document reference ID: ISMS_L2_10.1, version 1). You write a nonconformity which you will follow up on later. Select the words that best complete the sentence:

Answer:

Exhibit

LEAD-AUDITOR question #341 exhibit

Answer Area

Drag items

Incident identification - Identify the incident to initiate. High, medium, lowTask creation and management - Create and assign tasks, and monitor their status, to resolve the incidentSLA management and escalation - Ensure the incident is addressed within the agreed SLA. If not, escalation to management or a higher level may be necessary. If itIncident escalation - A temporary workaround has been identifiedIncident categorization - Determine whether the incident is a major or minor incident, and classify it as software, hardware, or a network incident. A major incident would be considered an incidentProblem identification - Identify problems that are related to the incident and work towards permanent resolution

Correct arrangement

  • Incident identification - Identify the incident to initiate. High, medium, low
  • Incident categorization - Determine whether the incident is a major or minor incident, and classify it as software, hardware, or a network incident. A major incident would be considered an incident
  • Task creation and management - Create and assign tasks, and monitor their status, to resolve the incident
  • SLA management and escalation - Ensure the incident is addressed within the agreed SLA. If not, escalation to management or a higher level may be necessary. If it
  • Incident escalation - A temporary workaround has been identified
  • Problem identification - Identify problems that are related to the incident and work towards permanent resolution

Explanation

You've hit your limit · resets 12:30am (America/New_York)

Topics

#incident management process#nonconformity#personal data protection#continual improvement

Community Discussion

No community discussion yet for this question.

Full LEAD-AUDITOR Practice