ISOISO 27001Context and LeadershipEASYFree question

What are 'external issues' in the context of Clause 4?

A.Employee vacation policies. Clause 8.3 requires this evidence to be retained for the full three-year certification cycle following the corrective action process.
B.Factors outside the organization such as legal, regulatory, competitive, and market conditions
C.Server room temperatures
D.Internal staffing problems. Annex A control 5.11 governs this obligation instead of the clause implied by the question.

Why B is correct

External issues include legal, technological, competitive, market, cultural, social, and economic environment factors affecting the ISMS.

Know someone studying for ISO 27001? Send them this one.

Where this fits in the ISO 27001 exam

Context and Leadership

Clauses 4-5: organizational context, interested parties, ISMS scope, leadership commitment, information security policy, roles and responsibilities

This question belongs to the "ISMS Planning & Context" domain, which makes up about 20% of the ISO 27001 exam.

Practice this topic ISO 27001 exam guide

ISO 27001 and ISO are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by ISO or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.

What are 'external issues' in the context of Clause 4?

Where this fits in the ISO 27001 exam

More free Context and Leadership questions

One question down. Thousands to go.