ISOISO 27001DocumentationEASYFree question
What controls must be applied to documented information?
- A.Controls for distribution, access, retrieval, use, storage, preservation, change control, retention, and disposition
- B.Controls for competence, awareness, communication, internal audit, management review, corrective action, and continual improvement
- C.Controls for classification, labelling, handling of media, transfer of information, secure disposal, and clear desk and screen
- D.Controls for approval, signature, review dates, and notification of document owners
Why A is correct
Documented information must be controlled for distribution, access, retrieval, use, storage, preservation, legibility, change control, retention, and disposition.
Know someone studying for ISO 27001? Send them this one.