nerdexam
PECB

LEAD-AUDITOR · Question #373

During an audit, it was discovered that a department was using outdated antivirus software. Which ISO 27001:2022 control does this situation most directly violate?

The correct answer is B. 8.8 - Management of technical vulnerabilities. You've hit your limit · resets 4am (America/New_York)

ISO 27001 Controls and Implementation

Question

During an audit, it was discovered that a department was using outdated antivirus software. Which ISO 27001:2022 control does this situation most directly violate?

Options

  • A5.4 - Access control
  • B8.8 - Management of technical vulnerabilities
  • C5.2 - Information security roles and responsibilities
  • D8.25 - Secure development lifecycle

How the community answered

(59 responses)
  • A
    2% (1)
  • B
    85% (50)
  • C
    5% (3)
  • D
    8% (5)

Explanation

You've hit your limit · resets 4am (America/New_York)

Topics

#technical vulnerability management#Annex A 8.8#antivirus#patch management

Community Discussion

No community discussion yet for this question.

Full LEAD-AUDITOR Practice