ISOISO 27001Implementation and OperationEASYFree question
What does ISO 27001 require regarding competence of personnel?
- A.Persons doing work that affects information security performance must be competent based on education, training, or experience
- B.Competence is demonstrated by certification of the information security manager, reviewed at each surveillance audit
- C.Personnel records must show a completed Annex A awareness course, signed by the line manager before access is granted
- D.Competence applies to the internal audit team, with qualifications verified by the certification body at Stage 1
Why A is correct
Clause 7.2 requires that persons performing work affecting ISMS performance are competent on the basis of appropriate education, training, or experience.
Know someone studying for ISO 27001? Send them this one.