MENU
An organization that is implementing the ISMS based on ISO/IEC 27001 has defined and communicated secure system architecture and engineering principles. However, there is no documented information related to these principles. Is this acceptable?
Suggested Answer: B
Get Premium ISO-IEC-27001-Lead-Implementer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
26 comments · newest first
OL
Olen
1 month ago
A is too lenient. Without documentation, principles can be misinterpreted.
FR
Francesco
1 month ago
B seems reasonable, but documentation helps in audits.
ER
Erin
2 months ago
I agree, C is the right choice. Standards need clear evidence.
JE
Jerry
2 months ago
I think it's not acceptable. Documentation is key for compliance.
HY
Hyun
2 months ago
But isn't just communication enough? I lean towards B.
DE
Denna
2 months ago
Option C makes sense. Standards need clear records.
PA
Paola
2 months ago
I agree, documentation helps in audits and clarity.
SU
Sue
2 months ago
I think it's not acceptable. Documentation is key for compliance.
FA
Fatima
3 months ago
No way, we need documentation. It ensures everyone understands the principles.
CA
Carla
3 months ago
But isn't just communicating enough? Option A seems valid too.
RO
Rozella
3 months ago
I agree, option C makes sense. Standards need documentation.
TE
Teri
3 months ago
I think it's not acceptable. Documentation is key for consistency.
MA
Maybelle
3 months ago
C) No way, they should definitely document those principles!
TE
Teresita
4 months ago
B) I think they’re covered, but it feels risky.
EL
Elke
5 months ago
C) Wait, isn't documentation crucial for compliance?
FI
Filiberto
5 months ago
B) Totally agree, documentation isn't explicitly required.
JA
Janine
5 months ago
A) Yes, communication is enough according to the standard.
AN
Antonio
6 months ago
Totally agree with B, as long as principles are communicated, it's fine.
FR
Freida
6 months ago
A is misleading, communication alone isn't enough.
AV
Avery
6 months ago
Surprised there's no documentation at all! How can they ensure compliance?
JE
Jettie
6 months ago
I disagree, C makes more sense. Documentation is key!
MA
Marjory
6 months ago
B is correct, documentation isn't explicitly required.
LU
Luisa
6 months ago
I thought the standard was flexible about documentation, but now I'm questioning if that applies to secure system architecture principles specifically.
LE
Leigha
7 months ago
I lean towards option C because I believe that having documented information is crucial for demonstrating adherence to the ISMS requirements.
TA
Tanja
7 months ago
I feel like I came across a similar question in our practice exams, and it emphasized the need for documentation to support the principles communicated.
LI
Linn
7 months ago
I think I remember that documentation is important for compliance, but I'm not entirely sure if it's explicitly required by the standard.