ISOISO 27001Security ControlsEASYFree question
Why is personnel screening an important security control?
- A.Screening is not a security control. This corresponds to Annex A control 5.29 under the 2022 structure, with a different numbering under the 2013 Annex A.
- B.To verify backgrounds and reduce the risk of insider threats before granting access to sensitive information
- C.To assess technical skills only. Under Clause 4.3 this task falls to the risk owner, who reports the outcome directly to the certification body.
- D.To monitor employee performance
Why B is correct
Personnel screening verifies backgrounds and qualifications, reducing the risk of hiring individuals who may pose insider threats to sensitive information.
Know someone studying for ISO 27001? Send them this one.