MENU
It is allowed that employees and contractors are provided with an anonymous reporting channel to report violations of information security policies or procedures (''whistle blowing'')
Suggested Answer: A
Get Premium ISO-IEC-27001-Lead-Implementer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
DA
Dallas
11 months ago
True, it's a good way to encourage reporting.
AU
Audria
11 months ago
Wait, really? I thought anonymity would be a problem.
BE
Beata
11 months ago
Wow, I didn't know that was allowed!
DO
Donte
12 months ago
I disagree, it could lead to false accusations.
CH
Chantell
12 months ago
That's definitely true! Whistleblowing is important for security.
GE
Gerald
1 year ago
I thought it was false because there are some regulations that might not allow for anonymous reporting. But I could be wrong!
BE
Benedict
1 year ago
I feel like I saw a similar question in our practice exam. I think the answer was true there too.
FE
Felicia
1 year ago
I'm not entirely sure. I remember something about whistleblowing policies, but I can't recall if anonymity was specifically mentioned.
MY
My
1 year ago
I think it's true that employees can report violations anonymously. We discussed this in class, right?
RO
Rolland
1 year ago
Hmm, I'm not entirely sure about this one. I know project network diagrams are used to show dependencies, but I'm not confident that's the right tool for communicating risk causes. I'll have to think this through carefully.
ME
Melda
1 year ago
I'm not too familiar with the JD Edwards EnterpriseOne IoT Orchestrator, so I'll have to think this through carefully.
VI
Viola
1 year ago
I think I remember something about banks being exempt if they have specific procedures in place for compliance, but I'm not entirely sure.