Transition 27001

Transition 27001 practice questions, page 2 of 2, with answer review and explanations.

Question 6

What has changed in Annex A of ISO/IEC 27001:2022?

  1. Annex A provides only a list of information security controls and does not provide control objectives
  2. Annex A provides a list of information security controls, their purpose, and additional information
  3. Annex A provides guidelines for implementing the requirements provided in clauses 4 to 10

Question 7

ISO/IEC 27001:2013 provided requirements for reporting information security events in Annex A.16.1.2.In which control of ISO/IEC 27001:2022 do we find this requirement?

  1. Annex A 6.8 Information security event reporting
  2. Annex A 6.3 Information security awareness, education and training
  3. Annex A 5.24 Information security incident management planning and preparation

Question 8

How can reference to business be interpreted in ISO/IEC 27001:2022?

  1. Those activities that are core to the purposes of the organization’s existence
  2. The organization’s activities that are needed for implementing information security management system requirements
  3. The set of structured activities that accomplish a specific organizational goal