PECB Exam ISO-IEC-27001-Lead-Implementer Topic 2 Question 47 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam

Question #: 47
Topic #: 2

[All ISO-IEC-27001-Lead-Implementer Questions]

Which situation presented in scenario 8 is not in compliance with ISO/IEC 27001 requirements?

AEmma has an operational role in the HealthGenic's management system

BThe recodification audit Is planned to be conducted two years after HealthGenic implemented the ISMS

CEmma had access to all offices and documentation of HealthGenic

Show Suggested Answer

Suggested Answer: A

by Shelba at Sep 16, 2024, 08:48 AM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Letha

3 months ago

I hope the correct answer isn't 'All of the above' - that would be a real ISO/IEC 27001 plot twist!

upvoted 0 times

Elke

1 months ago

I agree, 'All of the above' would be a nightmare!

upvoted 0 times

...

Maryanne

2 months ago

Option C: Not conducting regular security training for employees.

upvoted 0 times

...

Gayla

2 months ago

Option B: Allowing unauthorized access to the server room.

upvoted 0 times

...

Belen

2 months ago

Option A: Storing sensitive data on unencrypted devices.

upvoted 0 times

...

Quentin

3 months ago

This question is like a game of ISO/IEC 27001 'Where's Waldo?' - gotta find that non-compliant situation!

upvoted 0 times

...

Leota

3 months ago

C) Emma had access to all offices and documentation of HealthGenic. Yikes! That's like giving the keys to the kingdom to a random employee. Not very secure.

upvoted 0 times

...

Latricia

3 months ago

B) The recodification audit Is planned to be conducted two years after HealthGenic implemented the ISMS. Ah, I see. ISO/IEC 27001 requires more frequent audits.

upvoted 0 times

...

Maira

3 months ago

A) Emma has an operational role in the HealthGenic's management system. Hmm, I don't see any issues with that. Operational roles are common in ISMS.

upvoted 0 times

Arlette

2 months ago

Yes, access control is crucial for maintaining compliance.

upvoted 0 times

...

Flo

2 months ago

That's a clear violation of ISO/IEC 27001 requirements.

upvoted 0 times

...

Fletcher

3 months ago

But in scenario 8, Emma also has access to sensitive information without proper authorization.

upvoted 0 times

...

Yolando

3 months ago

I agree, having an operational role in ISMS is normal.

upvoted 0 times

...

Dong

4 months ago

C) Emma had access to all offices and documentation of HealthGenic. That's a big no-no. Access should be limited based on the principle of least privilege.

upvoted 0 times

Isabella

3 months ago

Emma having access to everything at HealthGenic is definitely not in compliance with ISO/IEC 27001 requirements.

upvoted 0 times

...

Lonna

3 months ago

Having access to all offices and documentation is a big security risk.

upvoted 0 times

...

Stevie

3 months ago

Access should definitely be limited based on the principle of least privilege.

upvoted 0 times

...

Madelyn

4 months ago

But what about the recodification audit being planned two years later? Isn't that also a violation of ISO/IEC 27001 requirements?

upvoted 0 times

...

Alex

4 months ago

B) The recodification audit Is planned to be conducted two years after HealthGenic implemented the ISMS. This doesn't sound right. Shouldn't it be conducted more frequently?

upvoted 0 times