PECB
LEAD-IMPLEMENTER · Question #186
Scenario: Evergreen tailored the format and naming convention of their information security policy to align with their internal structure and needs. Is this acceptable?
The correct answer is B. Yes ?the organization can determine the formats and names of these policy documents that meet. See the full explanation below for the reasoning.
Question
Scenario:
Evergreen tailored the format and naming convention of their information security policy to align with their internal structure and needs. Is this acceptable?
Options
- ANo ?the policy must adhere to the predefined template set by ISO/IEC 27001
- BYes ?the organization can determine the formats and names of these policy documents that meet
- CNo ?the policy format and naming conventions must be approved by an external auditor before
How the community answered
(64 responses)- A13% (8)
- B81% (52)
- C6% (4)
Community Discussion
No community discussion yet for this question.