Free ISO-IEC-27001-Lead-Implementer Exam Braindumps
ISO/IEC 27001 Lead Implementer Questions 131–135 (page: 28)

Scenario 10: NetworkFuse develops, manufactures, and sells network hardware. The company has had an operational information security management system (ISMS) based on ISO/IEC 27001 requirements and a quality management system (QMS) based on ISO 9001 for approximately two years. Recently, it has applied for a combined certification audit in order to obtain certification against ISO/IEC 27001 and ISO 9001.
After selecting the certification body, NetworkFuse prepared the employees for the audit. The company decided to not conduct a self-evaluation before the audit since, according to the top management, it was not necessary. In addition, it ensured the availability of documented information, including internal audit reports and management reviews, technologies in place, and the general operations of the ISMS and the QMS. However, the company requested from the certification body that the documentation could not be carried off-site.
However, the audit was not performed within the scheduled days because NetworkFuse rejected the audit team leader assigned and requested their replacement. The company asserted that the same audit team leader issued a recommendation for certification to its main competitor, which, for the company’s top management, was a potential conflict of interest. The request was not accepted by the certification body.
The certification body rejected NetworkFuse’s request to change the audit team leader. Is this acceptable? Refer to scenario 10.

Which of the following would be an acceptable justification for excluding Annex A 6.1 Screening control?

Scenario 34: BioLooVitalis is a biopharmaceutical firm headquartered in Singapore. Renowned for its pioneering work in the field of human therapeutics, BioLooVitalis places a strong emphasis on addressing critical healthcare concerns, particularly in the domains of cardiovascular diseases, oncology, bone health, and inflammation. BioLooVitalis has demonstrated its commitment to data security and integrity by maintaining an effective information security management system (ISMS) based on ISO/IEC 27001 for the past two years.
After noticing an increase in failed login attempts over several weeks, BioLooVitalis's IT security team reviewed log data, correlated it with user behavior patterns, and mapped it against known attack vectors to determine potential causes. Based on their findings, they prepared a technical report detailing the nature of the anomalies and submitted it to the compliance function. The compliance team then summarized the findings and presented them to the executive management during the quarterly ISMS performance review.
To proactively track system behavior following the spike in failed login attempts, BioLooVitalis's IT security team configured a dashboard showing real time login activity, system response times, and end point availability across departments. This helped the team quickly detect abnormal behavior without waiting for formal reporting cycles. Following the implementation of the real time access control dashboard, BioLooVitalis's internal audit team assessed whether the new processes and tools effectively reduced unauthorized access attempts and met both technical and policy-based requirements.
Lastly, the internal auditors collected system-generated access logs, reviewed user access reports, and conducted interviews with IT personnel. These data sources helped them verify whether the new controls were functioning as intended and aligned with internal ISMS objectives.
Based on the scenario above, answer the following question.
What aspect of the internal audit was addressed by BioLooVitalis? Refer to scenario 34.

Scenario 34: BioLooVitalis is a biopharmaceutical firm headquartered in Singapore. Renowned for its pioneering work in the field of human therapeutics, BioLooVitalis places a strong emphasis on addressing critical healthcare concerns, particularly in the domains of cardiovascular diseases, oncology, bone health, and inflammation. BioLooVitalis has demonstrated its commitment to data security and integrity by maintaining an effective information security management system (ISMS) based on ISO/IEC 27001 for the past two years.
After noticing an increase in failed login attempts over several weeks, BioLooVitalis's IT security team reviewed log data, correlated it with user behavior patterns, and mapped it against known attack vectors to determine potential causes. Based on their findings, they prepared a technical report detailing the nature of the anomalies and submitted it to the compliance function. The compliance team then summarized the findings and presented them to the executive management during the quarterly ISMS performance review.
To proactively track system behavior following the spike in failed login attempts, BioLooVitalis's IT security team configured a dashboard showing real time login activity, system response times, and end point availability across departments. This helped the team quickly detect abnormal behavior without waiting for formal reporting cycles. Following the implementation of the real time access control dashboard, BioLooVitalis's internal audit team assessed whether the new processes and tools effectively reduced unauthorized access attempts and met both technical and policy-based requirements.
Lastly, the internal auditors collected system-generated access logs, reviewed user access reports, and conducted interviews with IT personnel. These data sources helped them verify whether the new controls were functioning as intended and aligned with internal ISMS objectives.
Based on the scenario above, answer the following question.
Which measurement-related role did the compliance team perform at BioLooVitalis? Refer to scenario 34.

Scenario 10: NetworkFuse develops, manufactures, and sells network hardware. The company has had an operational information security management system (ISMS) based on ISO/IEC 27001 requirements and a quality management system (QMS) based on ISO 9001 for approximately two years. Recently, it has applied for a combined certification audit in order to obtain certification against ISO/IEC 27001 and ISO 9001.
After selecting the certification body, NetworkFuse prepared the employees for the audit. The company decided to not conduct a self-evaluation before the audit since, according to the top management, it was not necessary. In addition, it ensured the availability of documented information, including internal audit reports and management reviews, technologies in place, and the general operations of the ISMS and the QMS. However, the company requested from the certification body that the documentation could not be carried off-site.
However, the audit was not performed within the scheduled days because NetworkFuse rejected the audit team leader assigned and requested their replacement. The company asserted that the same audit team leader issued a recommendation for certification to its main competitor, which, for the company’s top management, was a potential conflict of interest. The request was not accepted by the certification body.
Based on the scenario above, answer the following question:
Does NetworkFuse fulfill the prerequisites for a certification audit?