ISO 27000 Foundation Certification The PDCA Cycle 5

Question 1

An organization has completed its first full PDCA cycle for its ISMS. What should it do next?

Accepted Answer

Begin a new PDCA cycle incorporating lessons learned from the first cycle

Answer

PDCA is a continual cycle; after Act, the organization feeds improvements back into a new Plan phase.

Question 2

Which of the following is the most accurate description of the 'Do' phase in an ISMS PDCA cycle?

Accepted Answer

Implementing and operating the controls selected during planning

Answer

The Do phase is where planned controls and processes are put into operation throughout the organization.

Question 3

A financial firm applies PDCA to its ISMS after a data breach. In which phase would root cause analysis of the breach be performed?

Accepted Answer

Check

Answer

Investigating incidents and performing root cause analysis are Check phase activities that evaluate what went wrong.

Question 4

Which of the following PDCA activities directly supports ISO/IEC 27001 Clause 10 (Improvement)?

Accepted Answer

Act: Taking corrective actions and pursuing continual improvement

Answer

ISO/IEC 27001 Clause 10 maps directly to the Act phase, covering nonconformity, corrective action, and continual improvement.

Question 5

What is the significance of 'preventive actions' in the PDCA cycle as applied to an ISMS?

Accepted Answer

They address potential nonconformities before they occur, applied during Plan and Act phases

Answer

Preventive actions anticipate and eliminate causes of potential nonconformities, typically planned in the Plan phase and reinforced in Act.

ISO 27000 Foundation Certification Practice Test