LEAD-AUDITOR · Question #84
LEAD-AUDITOR Question #84: Real Exam Question with Answer & Explanation
The correct answer is E. Raise an opportunity for improvement suggesting cabinet doors are locked whenever clients leave F. Review the CCTV records to ensure that only the client has accessed the cabinet since it was last H. With the permission of the guide, speak to the customer to confirm that they are in the process of. Leaving the cabinet unlocked while the technician is on a lunch break exposes the client's equipment and data to potential physical security risks, such as theft, damage, or tampering. This is a violation of the ISO/IEC 27001:2022 requirements for physical entry (control 7.2) and
Question
Options
- ADo nothing, the room appears adequately protected so it is unlikely that a security incident has
- BRaise a nonconformity against control 5.16 'identity management' as it may not be possible to
- CRaise a nonconformity against control 7.2 'physical entry' as the area where the client's equipment
- DRaise a nonconformity against control 7.4 'physical security monitoring' as the private suite is not
- ERaise an opportunity for improvement suggesting cabinet doors are locked whenever clients leave
- FReview the CCTV records to ensure that only the client has accessed the cabinet since it was last
- GWhen the technician returns from lunch, reprimand them for leaving the cabinet open.
- HWith the permission of the guide, speak to the customer to confirm that they are in the process of
Explanation
Leaving the cabinet unlocked while the technician is on a lunch break exposes the client's equipment and data to potential physical security risks, such as theft, damage, or tampering. This is a violation of the ISO/IEC 27001:2022 requirements for physical entry (control 7.2) and physical security monitoring (control 7.4), which aim to prevent unauthorized access to information processing facilities and assets. Therefore, the appropriate actions for the auditor are: Raise an opportunity for improvement (OFI) suggesting that the cabinet doors are locked whenever clients leave their suites, even if they intend to return within a short time. This would enhance the security of the client's equipment and data, and reduce the likelihood of security incidents. Review the CCTV records to ensure that only the client has accessed the cabinet since it was last confirmed as locked. This would verify the integrity and availability of the client's equipment and data, and identify any possible unauthorized access or interference. With the permission of the guide, speak to the customer to confirm that they are in the process of swapping out a drive. This would validate the reason for leaving the cabinet unlocked, and assess the impact and risk of the activity on the client's information security.
Community Discussion
No community discussion yet for this question.