Free CertiProf I27001F Exam Dumps Questions & Answers

According to ISO/IEC 27001:2022, who is required to carry out the ISMS review to ensure its suitability, adequacy, and effectiveness?

• A.The internal audit team
• B.Top management
• C.The external certification audit company
• D.Process owners

Within the ISMS, communicating the importance of effective information security management and of conforming to the ISMS requirements is a responsibility of:

• A.The IT Manager
• B.Top management
• C.The quality management representative
• D.The IT Security Manager

The information security policy must be known by:

• A.The IT Manager
• B.The quality management representative
• C.The IT Security Manager
• D.Everyone in the organization

What does ISO/IEC 27001:2022 require for the control of documented information?

• A.Have an internal auditor validate that documented information control is performed externally
• B.Control documented information so that it is available and suitable for use, where and when it is needed
• C.Hire a consultancy to determine how documented information should be controlled in order to achieve certification
• D.Acquire a technological tool to control documented information effectively

According to ISO/IEC 27001:2022, is it necessary to formulate an information security risk treatment plan?

• A.None of the above
• B.It is a recommendation, but not a requirement
• C.It is only an observation to keep in mind when auditing the management system
• D.It is a requirement to be fulfilled