PECB
LEAD-AUDITOR · Question #373
During an audit, it was discovered that a department was using outdated antivirus software. Which ISO 27001:2022 control does this situation most directly violate?
The correct answer is B. 8.8 - Management of technical vulnerabilities. You've hit your limit · resets 4am (America/New_York)
ISO 27001 Controls and Implementation
Question
During an audit, it was discovered that a department was using outdated antivirus software. Which ISO 27001:2022 control does this situation most directly violate?
Options
- A5.4 - Access control
- B8.8 - Management of technical vulnerabilities
- C5.2 - Information security roles and responsibilities
- D8.25 - Secure development lifecycle
How the community answered
(59 responses)- A2% (1)
- B85% (50)
- C5% (3)
- D8% (5)
Explanation
You've hit your limit · resets 4am (America/New_York)
Topics
#technical vulnerability management#Annex A 8.8#antivirus#patch management
Community Discussion
No community discussion yet for this question.