Câu 53: Lead Implementer: PECB Certified ISO/IEC 27001 Lead Implementer

Based on scenario 7, InfoSec contracted Anna as an external consultant. Based on her tasks, is this action compliant with ISO/IEC 27001?

1. A. No, the skills of incident response or forensic analysis shall be developed internally
2. B. Yes, forensic investigation may be conducted internally or by using external consultants — đáp án hiện tại
3. C. Yes, organizations must use external consultants for forensic investigation, as required by the standard