PECB
LEAD-IMPLEMENTER · Question #180
An organization has implemented additional controls from other sources alongside the ISO/IEC 27001 Annex A controls. Is this acceptable?
The correct answer is A. Yes, organizations can incorporate additional controls from other sources. See the full explanation below for the reasoning.
Question
An organization has implemented additional controls from other sources alongside the ISO/IEC 27001 Annex A controls. Is this acceptable?
Options
- AYes, organizations can incorporate additional controls from other sources
- BNo, organizations must only implement the controls listed in Annex A
- CYes, but only if the additional controls replace existing Annex A controls
How the community answered
(20 responses)- A70% (14)
- B10% (2)
- C20% (4)
Community Discussion
No community discussion yet for this question.