Which of the following steps is necessary to effectively implement information security controls?
Suggested Answer: B
Get Premium ISO-IEC-27001-Lead-Implementer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
28 comments · newest first
DO
Donte
10 months ago
Establishing a schedule is key, B all the way!
AL
Allene
10 months ago
I disagree, A makes no sense at all!
JO
Joanne
10 months ago
C can be helpful, but not always required.
RI
Ricarda
10 months ago
Wait, are people really suggesting A? That's wild!
BE
Becky
11 months ago
B is definitely necessary for a smooth rollout.
TR
Trinidad
11 months ago
I feel like we covered this in class, but I can’t recall if implementing controls before a risk assessment is ever a good idea.
IO
Iola
11 months ago
I remember a practice question that emphasized the need for a structured implementation schedule, which makes me think B is the right choice.
CO
Coleen
11 months ago
I’m not sure if hiring an external contractor is always necessary. It might depend on the organization's size and expertise.
VE
Veda
12 months ago
I think we discussed how important it is to conduct a risk assessment first, so I’m leaning towards option B.
LE
Lenna
12 months ago
I'm pretty confident that the correct answer is B - establishing a schedule for implementing the controls. That way you can plan out the rollout and make sure everything gets implemented properly.
LE
Lera
12 months ago
Ah, I remember this from the lecture. We need to establish a schedule for implementing each control to ensure they are rolled out effectively. Hiring an external contractor could also be helpful, but that's not the main step.
CR
Cristen
1 year ago
Hmm, I'm a bit unsure about this one. I know we need to implement security controls, but I'm not sure if the order matters. Maybe I should review my notes on the risk management process.
GE
Germaine
1 year ago
This seems like a straightforward question about the proper order of implementing security controls. I think the key is to conduct a risk assessment first before implementing any controls.
ES
Estrella
1 year ago
That's a good point, Van. Having experts involved can definitely improve the implementation process.
VA
Van
1 year ago
But what about C) Hire an external contractor with cybersecurity expertise? Wouldn't that help ensure the controls are implemented correctly?
EL
Elvis
1 year ago
I agree with Estrella. Without a schedule, it's hard to track progress.
CH
Charlesetta
1 year ago
Option C, baby! Bring in the big guns and let them work their magic. What could possibly go wrong?
CO
Corinne
1 year ago
User 2: Good idea! Bringing in experts can really help ensure our information security controls are implemented effectively.
SU
Sunshine
1 year ago
User 1: I think we should go with option C and hire an external contractor with cybersecurity expertise.
BR
Brandee
1 year ago
Scheduling the implementation of each control? Now we're talking! Gotta keep that cybersecurity train running on time.
ES
Estrella
1 year ago
I think B) Establish a schedule for the implementation of each control is necessary.
GA
Gabriele
1 year ago
Hiring an external contractor, huh? Might as well just hand them the keys to the company and call it a day. Option B is the way to go, folks.
NE
Nenita
1 year ago
Implementing security controls before a risk assessment? That's like trying to build a house without a blueprint. Definitely option B for me.
MO
Mozell
1 year ago
Yeah, it's important to prioritize and plan out the steps.
IL
Ilene
1 year ago
Hiring an external contractor with expertise can also be helpful.
TR
Troy
1 year ago
I agree, having a schedule for implementation is crucial.
LE
Leonida
1 year ago
Implementing controls before assessing risks is risky.
LI
Lisha
1 year ago
I agree, having a schedule for implementation is crucial.