Exam ISO-IEC-27001-Foundation Topic 3 Question 10 Discussion
Actual exam question for APMG-International's ISO-IEC-27001-Foundation exam
Question #: 10
Topic #: 3
Question #: 10
Topic #: 3
Identify the missing word(s) in the following control relating to the Policies for information security control.
"Information security policy and topic-specific policies should be defined, approved by management, [ ? ] and acknowledged by relevant personnel and relevant interested parties, and reviewed at planned intervals and if significant changes occur."
"Information security policy and topic-specific policies should be defined, approved by management, [ ? ] and acknowledged by relevant personnel and relevant interested parties, and reviewed at planned intervals and if significant changes occur."
Suggested Answer: C Vote an answer
Annex A.5.1 (Policies for information security) states:
"Information security policy and topic-specific policies should be defined, approved by management, published, communicated to and acknowledged by relevant personnel and relevant interested parties, and reviewed at planned intervals and if significant changes occur." This confirms that the missing words are "published, communicated to." The control emphasizes not just defining and approving policies but ensuring they are actively distributed and communicated so that relevant stakeholders are aware of and acknowledge them.
"Information security policy and topic-specific policies should be defined, approved by management, published, communicated to and acknowledged by relevant personnel and relevant interested parties, and reviewed at planned intervals and if significant changes occur." This confirms that the missing words are "published, communicated to." The control emphasizes not just defining and approving policies but ensuring they are actively distributed and communicated so that relevant stakeholders are aware of and acknowledge them.
by Cedric at Aug 31, 2026, 11:46 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).