ISO-IEC-27001-Lead-Implementer Exam Dumps | An organization documented each security control that it Implemented by describing their functions in

<< Prev Question Next Question >>

An organization documented each security control that it Implemented by describing their functions in detail. Is this compliant with ISO/IEC 27001?

A. Yes, but documenting each security control and not the process in general will make it difficult to review the documented information

B. No, the standard requires to document only the operation of processes and controls, so no description of each security control is needed

C. No, because the documented information should have a strict format, including the date, version number and author identification

Download PDF File