ISOISO 27001Implementation and OperationEASYFree question
An organization's operations team must coordinate with the people, processes, and communications established under Clause 7 to run the ISMS. Which scenario best shows all three Clause 7 elements supporting a single Clause 8 operation?
- A.An uncertified vendor patches systems silently with no internal awareness
- B.Patches are applied by anyone available with no notice to anyone
- C.Competent analysts run the patch process, staff are aware of the patch window, and the change is communicated to affected business units
- D.Patch records are deleted and no one is informed of outages
Why C is correct
Clause 8 operation draws on Clause 7.2 competence, 7.3 awareness, and 7.4 communication. Competent analysts performing the patch process, aware staff observing the window, and communicated changes to business units illustrate all three supporting one operational process.
Know someone studying for ISO 27001? Send them this one.