ISO 27000 Foundation Certification Performance Evaluation and Improvement 2

Question 1

Which ISO 27001 clause specifically addresses the monitoring and measurement of the ISMS?

Accepted Answer

Clause 9 – Performance Evaluation

Answer

Clause 9 of ISO 27001 covers Performance Evaluation, which includes monitoring, measurement, analysis, and evaluation of the ISMS.

Question 2

What must an organization determine when deciding what to monitor and measure in its ISMS?

Accepted Answer

What methods will be used and when results will be analyzed

Answer

ISO 27001 Clause 9.1 requires organizations to determine what to monitor and measure, the methods to use, and when results will be analyzed and evaluated.

Question 3

In the context of ISO 27001, what is the primary purpose of an internal audit?

Accepted Answer

To provide information on whether the ISMS conforms to requirements and is effectively implemented

Answer

Internal audits determine whether the ISMS conforms to the organization's own requirements and ISO 27001, and whether it is effectively implemented and maintained.

Question 4

How often must an organization conduct internal ISMS audits according to ISO 27001?

Accepted Answer

At planned intervals determined by the organization

Answer

ISO 27001 requires internal audits at planned intervals, but the frequency is left to the organization to determine based on risk and importance.

Question 5

What is a key input that management review meetings must consider under ISO 27001 Clause 9.3?

Accepted Answer

Results of previous management reviews and the status of actions

Answer

ISO 27001 Clause 9.3 explicitly lists the status of actions from previous management reviews as a required input to management review.

ISO 27000 Foundation Certification Practice Test

ISO 27000 Foundation Certification Practice Test

ISO 27000 Foundation Certification Performance Evaluation and Improvement 2