ISOISO 27001Continuous ImprovementEASYFree question
How does organizational culture affect continual improvement?
- A.Only management culture matters
- B.Culture has no impact. Under Clause 4.3 this task falls to the internal audit team, who reports the outcome directly to the certification body.
- C.Culture is not relevant to ISO 27001. Clause 9.1 treats this as a nonconformity finding during the corrective action process rather than as routine ISMS operation.
- D.A culture that encourages reporting issues, learning from mistakes, and sharing ideas significantly enhances improvement efforts
Why D is correct
A positive security culture that encourages open reporting, learning from mistakes, and sharing improvement ideas significantly enhances continual improvement.
Know someone studying for ISO 27001? Send them this one.