Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

APMG-International ISO-IEC-27001-Foundation Exam - Topic 3 Question 11 Discussion

Identify the missing words in the following sentence.The organization shall establish, implement, maintain and [ ? ] an information security management system, including the processes needed and their interactions, in accordance with the requirements of this document.
B) continually improve
A) report on
C) communicate the importance of
D) enforce standards for

APMG-International ISO-IEC-27001-Foundation Exam - Topic 3 Question 11 Discussion

Actual exam question for APMG-International's ISO-IEC-27001-Foundation exam
Question #: 11
Topic #: 3
[All ISO-IEC-27001-Foundation Questions]

Identify the missing words in the following sentence.

The organization shall establish, implement, maintain and [ ? ] an information security management system, including the processes needed and their interactions, in accordance with the requirements of this document.

Show Suggested Answer Hide Answer
Suggested Answer: B

Clause 4.4 of ISO/IEC 27001:2022 states:

''The organization shall establish, implement, maintain and continually improve an information security management system, including the processes needed and their interactions, in accordance with the requirements of this document.''

This requirement highlights that an ISMS is not static; it must evolve continuously to adapt to new risks, technologies, and business changes. Options A, C, and D are not mentioned in the clause. The continual improvement cycle is central to ISO standards, aligning with the Plan-Do-Check-Act (PDCA) model.

Thus, the missing words are ''continually improve.''


Contribute your Thoughts:

0/2000 characters
Johnetta
4 hours ago
C) communicate the importance of is important, but not the best fit here.
upvoted 0 times
...
Ming
5 days ago
A) report on could work too, but feels less proactive.
upvoted 0 times
...
Becky
10 days ago
I agree, B makes sense. Ongoing improvement is key.
upvoted 0 times
...
Dottie
16 days ago
I think it should be B) continually improve. It fits the context.
upvoted 0 times
...
Bernardo
21 days ago
C) communicate the importance of could work, but B feels stronger overall.
upvoted 0 times
...
Lina
26 days ago
I’m leaning towards A) report on. It seems relevant too.
upvoted 0 times
...
Sharika
1 month ago
I agree, Alice. Continuous improvement is key in management systems.
upvoted 0 times
...
Goldie
1 month ago
I think it's B) continually improve. It fits well.
upvoted 0 times
...
Shaun
1 month ago
C) communicate the importance of sounds good, but I prefer B.
upvoted 0 times
...
Jenise
2 months ago
I'm leaning towards A) report on. Reporting is crucial too.
upvoted 0 times
...
Sharan
2 months ago
I agree with Alice. Continuous improvement is key in security.
upvoted 0 times
...
Barbra
2 months ago
I think it's B) continually improve. It fits well with management systems.
upvoted 0 times
...
Michel
2 months ago
C) communicate the importance of could also fit, but B is stronger.
upvoted 0 times
...
Gayla
2 months ago
Wait, is it really B? That seems too vague.
upvoted 0 times
...
Jose
4 months ago
I thought it could be A) report on, but B feels right.
upvoted 0 times
...
Phillip
4 months ago
Definitely agree with B! Makes the most sense.
upvoted 0 times
...
Juliana
4 months ago
I'm pretty sure it's B) continually improve.
upvoted 0 times
...
Chau
4 months ago
I thought it could be C) communicate the importance of, but now I'm not so sure.
upvoted 0 times
...
Lili
4 months ago
Wait, why would you need to enforce standards? Isn't that part of the system already?
upvoted 0 times
...
Zita
5 months ago
A) report on seems off to me.
upvoted 0 times
...
Ressie
5 months ago
Definitely agree with B! Makes the most sense.
upvoted 0 times
...
Dacia
5 months ago
I'm pretty sure it's B) continually improve.
upvoted 0 times
...
Clarence
5 months ago
I was leaning towards B) continually improve too, but I wonder if C) communicate the importance of could also be relevant in some contexts.
upvoted 0 times
...
Glen
5 months ago
I feel like A) report on could fit, but it doesn't really capture the proactive nature of managing a system.
upvoted 0 times
...
Giovanna
5 months ago
I'm not entirely sure, but I remember a similar question where we discussed the importance of maintaining and improving systems.
upvoted 0 times
...
Salome
6 months ago
I think the answer might be B) continually improve, since it aligns with the idea of ongoing management systems.
upvoted 0 times
...

Save Cancel