ISO 27000 Foundation Certification The PDCA Cycle 2

Question 1

In the context of ISO/IEC 27001, which PDCA phase is responsible for establishing the information security policy?

Accepted Answer

Plan

Answer

The Plan phase establishes the ISMS scope, policy, objectives, and risk assessment processes.

Question 2

An organization discovers during an internal audit that its incident response procedures are not being followed. Which PDCA phase does this discovery belong to?

Accepted Answer

Check

Answer

Internal audits and reviews are Check phase activities that measure whether implemented controls are effective.

Question 3

What is the primary purpose of the 'Act' phase in the PDCA cycle within an ISMS?

Accepted Answer

Taking corrective and preventive actions to continually improve the ISMS

Answer

The Act phase focuses on continual improvement by addressing nonconformities and implementing corrective actions.

Question 4

Which ISO/IEC 27001 clause activity most directly aligns with the 'Do' phase of PDCA?

Accepted Answer

Clause 8: Operation

Answer

Clause 8 (Operation) covers implementing and controlling processes, which corresponds to the Do phase.

Question 5

How does the PDCA cycle support the concept of continual improvement in an ISMS?

Accepted Answer

By creating a feedback loop where findings from Check and Act phases refine future Plan phases

Answer

PDCA creates an iterative feedback loop where audit findings and corrective actions continuously feed back into better planning.

ISO 27000 Foundation Certification Practice Test

ISO 27000 Foundation Certification Practice Test

ISO 27000 Foundation Certification The PDCA Cycle 2