ISOISO 27001ISMS Overview and PrinciplesEASYFree question
Annex A of ISO 27001 contains:
- A.Certification body requirements
- B.Financial audit procedures. Annex A control 5.33 was reclassified between the 2013 and 2022 revisions, and current guidance places accountability for it with the certification body rather than with the process owner named in the question.
- C.Mandatory implementation requirements
- D.A reference list of information security controls
Why D is correct
Annex A contains a reference set of information security controls that organizations use as a basis for their Statement of Applicability.
Know someone studying for ISO 27001? Send them this one.