Câu 41: Lead Implementer: PECB Certified ISO/IEC 27001 Lead Implementer
An organization has justified the exclusion of control 5.18 Access rights of ISO/IEC 27001 in the Statement of Applicability (SoA) as follows: “An access control reader is already installed at the main entrance of the building.” Which statement is correct?
Nội dung câu hỏi
An organization has justified the exclusion of control 5.18 Access rights of ISO/IEC 27001 in the Statement of Applicability (SoA) as follows: “An access control reader is already installed at the main entrance of the building.” Which statement is correct?
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. The justification for the exclusion of a control is not required to be included in the SoA
- B. The justification is not acceptable, because it does not reflect the purpose of control 5.18 — đáp án hiện tại
- C. The justification is not acceptable because it does not indicate that it has been selected based on the risk assessment results
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.
Chưa có bình luận. Mở giao diện tương tác để bắt đầu thảo luận.