After migrating to cloud, the IT team of a company initiated a change in the ISMS scope and implemented all the required modifications. Is this acceptable?
Answer(s): A
https://advisera.com/27001academy/knowledgebase/how-to-define-the-isms-scope/
A manufacturing company faces a risk of production delays due to potential supply chain disruptions. After assessing the potential impact of the risk, the company decided to accept the risk, considering the disruption unlikely to significantly affect its operations. Which risk treatment option did the company select in this case?
Answer(s): B
By deciding to accept the risk after assessing its low impact, the company chose risk retention, meaning it acknowledges the risk and its potential consequences without implementing additional controls or mitigation measures.
Which of the following is the most suitable option for presenting raw data in a user-friendly, easy-to-read format?
Reports are the most suitable option for presenting raw data in a user-friendly, easy-to-read format. Reports allow for the organization and presentation of raw data in a structured manner, making it easier for users to understand key insights. They can include tables, graphs, charts, and summaries to enhance readability and comprehension.
Scenario 12: Solena is an online retailer that offers technological products, such as desktops, laptops, and smartphones. Last year, Solena launched a new payment application which has improved the customer experience through the usage of machine learning algorithms which help the company to automatically charge customers.Last month, attackers managed to breach the database and exposed the information of thousands Solena customers, including their names, addresses, and encrypted passwords.Following the incident, the company received an increasingly high number of complaints. One of them involved Lucas, a loyal customer. He complained about not being able to access the website with his credentials and was continually asked to change his password. He would encounter the same problem every week and filed seven complaints toward Solena.To address the complaints, Solena decided to deliver a press release, in which the representatives of Solena denied the attack. They claimed that the problem was technical and they were working toward a solution. The company asked for understanding from their customers and advised them to change their passwords every week until further notice. In the meantime, the attacker still had access to the data. After Solena investigated the incident, it was understood that the attackers used the credentials of the data-entry personnel to make the breach.According to scenario 12, Solena decided to issue a press release in which its representatives denied the attack. What does this situation present?
What is the main difference between an audit program and an audit plan?
The main difference between an audit program and an audit plan is that the audit program provides the overall framework for multiple audits, including timelines, objectives, and audit criteria across a series of audits. It ensures that audits are planned and coordinated effectively across an organization. On the other hand, an audit plan is more specific and focuses on the activities, arrangements, and logistics for a particular audit, including detailed tasks, schedules, and the scope of the audit being conducted.
Post your Comments and Discuss PECB ISO-IEC-27001-Lead-Implementer exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ISO-IEC-27001-Lead-Implementer content, but please register or login to continue.