PECB ISO-IEC-27001-Lead-Implementer Exam
ISO/IEC 27001 Lead Implementer (Page 4 )

Updated On: 7-Feb-2026
View Related Case Study

If an organization wants to monitor operations in real time and notify users about deviations, which type of dashboard should be used?

  1. Strategic dashboard
  2. Tactical dashboard
  3. Operational dashboard

Answer(s): C



View Related Case Study

Who should verify the effectiveness of the corrective actions taken by the auditee after an internal audit?

  1. An independent auditor should be contracted to perform this evaluation
  2. The internal auditor
  3. The information security manager

Answer(s): B



View Related Case Study

Company X restricted the access of the internal auditor to some of its documentation taking into account its confidentiality. Is this acceptable?

  1. Yes, it is up to the company to determine what an internal auditor can access
  2. Yes, confidential information should not be accessed by internal auditors
  3. No, restricting the internal auditor s access to offices and documentation can negatively affect the internal audit process

Answer(s): C



View Related Case Study

Based on the scenario above, answer the following question:
Texas H&H Inc. decided to integrate the incident management policy to the existent information security policy. How do you define this situation?

  1. Acceptable, the incident management policy may be integrated into the overall information security policy of the organization
  2. Acceptable, but only if the incident management policy addresses environmental, or health and safety issues
  3. Unacceptable, the incident management policy should be drafted as a separate document in order to be clear and effective

Answer(s): A



View Related Case Study

Texas H&H Inc. decided to assign an internal expert for their forensic analysis. Is this acceptable? Refer to scenario 15.

  1. Yes, forensic analysis can be done by either an internal or external expert
  2. Yes, hiring an external expert for forensic analysis is a requirement of the standard
  3. No, the company's forensic analysis should be based on the conclusion of its cloud storage provide investigation

Answer(s): A






Post your Comments and Discuss PECB ISO-IEC-27001-Lead-Implementer exam prep with other Community members:

Join the ISO-IEC-27001-Lead-Implementer Discussion