MENU
The information security manager is writing the Information Security Management System (ISMS) documentation. The controls that are to be implemented must be described in one of the phases of the Plan-Do-
Check-Act (PDCA) cycle of the ISMS.
In which phase should these controls be described?
Suggested Answer: A
Get Premium ISMP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
MA
Maryln
12 months ago
Seems obvious, but I had my doubts at first!
LE
Lemuel
12 months ago
Plan phase makes the most sense, for sure.
WI
Willard
12 months ago
Wait, are we sure it's not in the Do phase?
ER
Erick
1 year ago
I agree, that's where you set the controls.
FR
Francine
1 year ago
Definitely in the Plan phase!
SH
Shaquana
1 year ago
I could be wrong, but I feel like the Check phase is more about evaluating the controls after they've been implemented, not describing them.
MA
Mayra
1 year ago
I remember practicing a question like this, and I think it was about planning the controls in the Plan phase. It makes sense to document them there.
JE
Jeannine
1 year ago
I'm not entirely sure, but I feel like it might be in the Do phase since that's when we actually implement the controls.
AU
Augustine
1 year ago
I think the controls should be described in the Plan phase, right? That's where we set everything up.
YU
Yuriko
1 year ago
This seems like a tricky one. I'll need to think carefully about the GRUB menu options and how they relate to the installation process.
HE
Helaine
1 year ago
This seems like a straightforward question about IT risk management. I think the key is to identify who has the right expertise and authority to select the appropriate KRIs for implementation.
GE
Georgene
1 year ago
Remember the practice question we did on dial peers? I feel like configuring codec transparency might be the best option here.
TI
Timothy
1 year ago
Ah, I remember learning about the Civil Rights Act of 1991 in my law class. That's the one that made some important technical changes to the 1964 Act, so I'm pretty sure that's the right answer here. I'll double-check the details, but I feel good about going with option B.