ISOISO 27001Isms FundamentalsEASYFree question
What does ISO 27001 require regarding personnel competence?
- A.Persons doing ISMS work must hold a certified lead implementer qualification, issued by an accredited body
- B.Staff in security roles must pass a vendor exam, retaken at each recertification audit
- C.Contractors working for the organization must be vetted, with competence confirmed by the certification body
- D.Persons doing work under the organization's control must be competent based on education, training, or experience
Why D is correct
ISO 27001 requires that persons performing work affecting information security performance are competent based on appropriate education, training, or experience.
Know someone studying for ISO 27001? Send them this one.