APMG-International ISO-IEC-27001-Foundation Exam - Topic 4 Question 10 Discussion

Actual exam question for APMG-International's ISO-IEC-27001-Foundation exam

Question #: 10
Topic #: 4

[All ISO-IEC-27001-Foundation Questions]

Identify the missing words in the following sentence.

The organization shall establish, implement, maintain and [ ? ] an information security management system, including the processes needed and their interactions, in accordance with the requirements of this document.

Bcontinually improve

Areport on

Ccommunicate the importance of

Denforce standards for

Show Suggested Answer

Suggested Answer: B

Clause 4.4 of ISO/IEC 27001:2022 states:

''The organization shall establish, implement, maintain and continually improve an information security management system, including the processes needed and their interactions, in accordance with the requirements of this document.''

This requirement highlights that an ISMS is not static; it must evolve continuously to adapt to new risks, technologies, and business changes. Options A, C, and D are not mentioned in the clause. The continual improvement cycle is central to ISO standards, aligning with the Plan-Do-Check-Act (PDCA) model.

Thus, the missing words are ''continually improve.''

by Barrett at Jan 23, 2026, 12:53 PM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27001-Foundation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Malcolm

5 days ago

This reminds me of a similar question we practiced about the PDCA cycle. I feel like "monitor" could fit, but it doesn’t sound quite right.

upvoted 0 times

...

Willard

10 days ago

I think the missing word might be "continually improve," but I’m not completely sure.

upvoted 0 times

...

Dean

15 days ago

I'm confident I know the answer to this. Based on the language used and the topic of information security, the missing word is most likely "improve" or "continually improve." That would fit the pattern and fulfill the requirements stated in the sentence.

upvoted 0 times

...

Karrie

20 days ago

This is a tricky one, but I think I can figure it out. The key is to focus on the overall meaning and flow of the sentence. The missing word should logically complete the sequence of establishing, implementing, maintaining, and something else related to the information security management system.

upvoted 0 times

...

Marvel

25 days ago

Okay, I've got a strategy for this. The sentence is talking about an information security management system, so the missing word is likely related to managing, monitoring, or improving that system. I'll brainstorm a few options and use the context to narrow it down.

upvoted 0 times

...

Daren

1 month ago

I'm a bit unsure about this one. The sentence structure and keywords seem familiar, but I'm not confident I can identify the exact missing word. I'll need to think it through step-by-step.

upvoted 0 times

...

Carla

1 month ago

Hmm, this looks like a straightforward fill-in-the-blank question. I'll need to carefully review the context and requirements to determine the most appropriate word to complete the sentence.

upvoted 0 times

...