ISO 27000 Foundation Certification Governance and Leadership

Question 1

According to ISO 27001, who holds ultimate accountability for the ISMS?

Accepted Answer

Top management

Answer

The IT department

Answer

The information security officer

Answer

External auditors

Question 2

Which document formally expresses an organization's commitment to information security under ISO 27001?

Accepted Answer

Information security policy

Answer

Risk register

Answer

Statement of applicability

Answer

Business continuity plan

Question 3

What must the information security policy be in accordance with, according to ISO 27001?

Accepted Answer

The organization's strategic direction

Answer

Industry benchmarks only

Answer

Government regulations exclusively

Answer

International audit standards

Question 4

Who is responsible for defining the scope of the ISMS in ISO 27001?

Accepted Answer

Top management

Answer

External consultants

Answer

The IT security team

Answer

ISO certification body

Question 5

Which of the following is a key leadership activity required by ISO 27001?

Accepted Answer

Ensuring integration of ISMS requirements into business processes

Answer

Performing penetration tests

Answer

Writing firewall rules

Answer

Conducting employee background checks

Question 6

How must an organization's information security objectives relate to its overall business objectives?

Accepted Answer

They must be aligned and consistent

Answer

They must be completely independent

Answer

They are set solely by the IT team

Answer

They only apply to technical systems