ISOISO 27001ISMS Overview and PrinciplesEASYFree question

An information security policy under ISO 27001 must:

A.Only address technical controls
B.Be identical to other organizations' policies
C.Be appropriate to the organization's purpose and include a commitment to continual improvement
D.Be updated only during certification audits

Why C is correct

The policy must be appropriate to the organization, provide a framework for objectives, include commitments to requirements and continual improvement.

Know someone studying for ISO 27001? Send them this one.

ISO 27001 and ISO are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by ISO or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.

An information security policy under ISO 27001 must:

Where this fits in the ISO 27001 exam

One question down. Thousands to go.

An information security policy under ISO 27001 must:

Where this fits in the ISO 27001 exam

More free ISMS Overview and Principles questions

One question down. Thousands to go.