ISO 27000 Foundation Certification Governance and Leadership

Question 1

According to ISO 27001, who holds ultimate accountability for the ISMS?

Accepted Answer

Top management

Answer

ISO 27001 requires top management to take ultimate accountability for establishing, implementing, and maintaining the ISMS.

Question 2

Which document formally expresses an organization's commitment to information security under ISO 27001?

Accepted Answer

Information security policy

Answer

The information security policy is the top-level document that formally communicates management's commitment and direction for information security.

Question 3

What must the information security policy be in accordance with, according to ISO 27001?

Accepted Answer

The organization's strategic direction

Answer

ISO 27001 requires that the information security policy be appropriate to and aligned with the organization's overall strategic direction.

Question 4

Who is responsible for defining the scope of the ISMS in ISO 27001?

Accepted Answer

Top management

Answer

Top management is responsible for determining and approving the boundaries and applicability of the ISMS, i.e., its scope.

Question 5

Which of the following is a key leadership activity required by ISO 27001?

Accepted Answer

Ensuring integration of ISMS requirements into business processes

Answer

ISO 27001 requires top management to ensure that ISMS requirements are integrated into the organization's business processes.

ISO 27000 Foundation Certification Practice Test