PECB
LEAD-IMPLEMENTER · Question #137
An organization that is implementing the ISMS based on ISO/IEC 27001 has defined and communicated secure system architecture and engineering principles. However, there is no documented information…
The correct answer is B. Yes, documented information related to secure system architecture and engineering principles is. See the full explanation below for the reasoning.
Question
An organization that is implementing the ISMS based on ISO/IEC 27001 has defined and communicated secure system architecture and engineering principles. However, there is no documented information related to these principles. Is this acceptable?
Options
- AYes, the standard requires organizations to only communicate secure system architecture and
- BYes, documented information related to secure system architecture and engineering principles is
- CNo, documenting secure system architecture and engineering principles is required by the
How the community answered
(34 responses)- A6% (2)
- B82% (28)
- C12% (4)
Community Discussion
No community discussion yet for this question.