Discuss PECB ISO-IEC-27001-Lead-Implementer Exam Topic 6 Question 4

What is the ISO / IEC 27002 standard?

AIt is a guide of good practices that describes the control objectives and recommended controls regarding information security.

BIt is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001

CIt is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.

Suggested Answer: A

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Barb 11 months ago

Definitely a must-read for anyone in the field!

Linwood 11 months ago

I thought it was just a checklist, but it's deeper than that!

Minna 12 months ago

Wait, isn't it more about metrics and effectiveness?

Madelyn 12 months ago

Totally agree, it's essential for ISMS!

Lashon 12 months ago

It's all about good practices for info security!

Louann 1 year ago

I practiced a question similar to this, and I think it was about the controls and objectives, so I’m leaning towards option A being the correct answer.

Aileen 1 year ago

I feel like option A sounds right, but I also recall something about metrics in ISO/IEC 27002. Was that part of it or just in the context of ISO/IEC 27001?

Gerald 1 year ago

I remember studying that it provides guidance on control objectives, but I might be mixing it up with ISO/IEC 27001, which is more about the ISMS design.

Avery 1 year ago

I think ISO/IEC 27002 is about good practices for information security controls, but I'm not entirely sure if it also covers implementation aspects.

Alisha 1 year ago

Hmm, this one seems straightforward. I'm pretty sure the missing word is "Process" since that's the typical middle part of the SIPOC acronym.

William 1 year ago

Hmm, this is a tricky one. I want to make sure I understand the requirements fully before selecting an answer. Let me re-read the question and think through the implications of each choice.

Sabra 1 year ago

I'm leaning towards A. It feels safer to step back from the decision rather than risk the perception of conflict, but I'm not completely confident.

PECB ISO-IEC-27001-Lead-Implementer Exam - Topic 6 Question 4 Discussion