Discuss CertiProf I27001F Exam Topic 1 Question 11

What does ISO/IEC 27001:2022 require in order for top management to demonstrate leadership and commitment with respect to the Information Security Management System?

AEnsuring that the information security policy and information security objectives are established and are compatible with the strategic direction of the organization

BHiring a consultancy to determine the best way to do it

CAppointing a volunteer to be responsible for the Information Security Management System

DNothing is required

Suggested Answer: A

ISO/IEC 27001:2022 requires top management to demonstrate leadership and commitment by ensuring that the information security policy and information security objectives are established and are compatible with the strategic direction of the organization. Top management must also integrate ISMS requirements into the organization's processes, ensure resources are available, support relevant roles, and promote continual improvement. The standard does not allow leadership accountability to be replaced by a consultant or a volunteer. Therefore, option A is correct.

=======

Get Premium I27001F Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Arlette 2 months ago

B seems like a shortcut. Leadership should be hands-on, not outsourced.

Jeanice 2 months ago

Agreed! A shows real commitment from top management.

Buddy 2 months ago

I think A is the best choice. It aligns with the organization's goals.

Scarlet 3 months ago

D) is definitely wrong. There are clear requirements!

Wilda 3 months ago

C) is just not serious. You can't have a volunteer for this!

Rebecka 3 months ago

Wait, hiring a consultancy isn’t a requirement? That’s surprising!

Bette 3 months ago

Totally agree, leadership needs to align with strategy!

Lawanda 3 months ago

A) is definitely required for ISO 27001:2022.

Lenna 3 months ago

Honestly, I thought nothing was required (option D) at first, but that seems too simplistic for ISO/IEC 27001.

Octavio 4 months ago

I recall a practice question that mentioned the importance of establishing policies and objectives, which makes me lean towards option A as well.

Ahmed 4 months ago

I'm not entirely sure, but I feel like hiring a consultancy (option B) isn't really what the standard emphasizes for leadership commitment.

Danica 4 months ago

I think option A is correct because it aligns with what I remember about leadership roles in ISO standards.

CertiProf I27001F Exam - Topic 1 Question 11 Discussion