PECB Exam ISO-IEC-27001-Lead-Implementer Topic 1 Question 49 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam

Question #: 49
Topic #: 1

[All ISO-IEC-27001-Lead-Implementer Questions]

Once they made sure that the attackers do not have access in their system, the security administrators decided to proceed with the forensic analysis. They concluded that their access security system was not designed tor threat detection, including the detection of malicious files which could be the cause of possible future attacks.

Based on these findings. Texas H$H inc, decided to modify its access security system to avoid future incidents and integrate an incident management policy in their Information security policy that could serve as guidance for employees on how to respond to similar incidents.

Based on the scenario above, answer the following question:

Texas M&H Inc. decided to integrate the incident management policy to the existent information security policy. How do you define this situation?

AAcceptable, the incident management policy may be integrated into the overall information security policy of the organization

BAcceptable, but only if the incident management policy addresses environmental, or health and safety issues

CUnacceptable, the incident management policy should be drafted as a separate document in order to be clear and effective

Show Suggested Answer

Suggested Answer: A

by Hassie at Sep 19, 2024, 01:04 PM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Muriel

2 months ago

I agree with option A. Consolidating the policies streamlines the security framework and makes it easier to implement.

upvoted 0 times

Jean

1 months ago

A) Acceptable, the incident management policy may be integrated into the overall information security policy of the organization

upvoted 0 times

...

Marvel

1 months ago

I agree, it helps in ensuring that all security measures are aligned and easily accessible.

upvoted 0 times

...

Clorinda

1 months ago

A) Acceptable, the incident management policy may be integrated into the overall information security policy of the organization

upvoted 0 times

...

Elmira

2 months ago

Wait, does this mean they'll have to deal with more paperwork now? I hope they don't forget to add a 'Pizza Fridays' policy as well.

upvoted 0 times

...

Margart

2 months ago

Hmm, I think option A is the right choice. Integrating the policies shows a holistic approach to security.

upvoted 0 times

...

Tamekia

2 months ago

I'm not sure about this. Separating the incident management policy might be better to keep it focused and effective.

upvoted 0 times

Colby

2 months ago

A) Acceptable, the incident management policy may be integrated into the overall information security policy of the organization

upvoted 0 times

...

Cecilia

2 months ago

I agree, keeping it separate can help maintain clarity and effectiveness.

upvoted 0 times

...

Lindsey

2 months ago

C) Unacceptable, the incident management policy should be drafted as a separate document in order to be clear and effective

upvoted 0 times

...

Dahlia

2 months ago

A) Acceptable, the incident management policy may be integrated into the overall information security policy of the organization

upvoted 0 times

...

Blair

3 months ago

I disagree. I believe C) is the best option as having a separate incident management policy can prevent confusion and ensure that it is clearly defined and effective.

upvoted 0 times

...

Brinda

3 months ago

The integration of the incident management policy into the overall information security policy makes sense. It ensures a comprehensive approach to security management.

upvoted 0 times

Reita

2 months ago

A) Acceptable, the incident management policy may be integrated into the overall information security policy of the organization

upvoted 0 times

...

Kaycee

2 months ago

C) Unacceptable, the incident management policy should be drafted as a separate document in order to be clear and effective

upvoted 0 times

...

Markus

2 months ago

A) Acceptable, the incident management policy may be integrated into the overall information security policy of the organization

upvoted 0 times

...

Youlanda

3 months ago

I agree with Herschel. Having the incident management policy as part of the overall information security policy can ensure that all security measures are aligned and easily accessible.

upvoted 0 times

...

Herschel

3 months ago

I think A) is acceptable because integrating the incident management policy into the information security policy can provide clear guidance for employees.

upvoted 0 times

...