nerdexam
PECB

LEAD-AUDITOR · Question #349

Drag and Drop Question You are an experienced ISMS internal auditor. You have just completed a scheduled information security audit of your organisation when the IT Manager approaches you and asks…

Sign in or unlock LEAD-AUDITOR to reveal the answer and full explanation for question #349. The question stem and answer options stay visible for context.

ISO/IEC 27001 Controls Management

Question

Drag and Drop Question You are an experienced ISMS internal auditor. You have just completed a scheduled information security audit of your organisation when the IT Manager approaches you and asks for your assistance in the revision of the company's Statement of Applicability. The IT Manager is attempting to update the ISO/IEC 27001:2013 based Statement of Applicability to a Statement aligned to the 4 control themes present in ISO/IEC 27001:2022 (Organizational controls, People Controls, Physical Controls, Technical Controls). The IT Manager is happy with their reassignment of controls, with the following exceptions. He asks you which of the four control categories each of the following should appear under. Answer:

Exhibit

LEAD-AUDITOR question #349 exhibit

Answer Area

Drag items

Technological controlPeople controlOrganizational controlPhysical control

Unlock LEAD-AUDITOR to see the answer

You've previewed enough free LEAD-AUDITOR questions. Unlock LEAD-AUDITOR for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#ISO 27001:2022 controls#control categories#Statement of Applicability#control themes
Full LEAD-AUDITOR Practice