Exam I27001F Topic 1 Question 7 Discussion

Actual exam question for CertiProf's I27001F exam
Question #: 7
Topic #: 1
What details must be included in a Statement of Applicability?

Suggested Answer: D Vote an answer

In ISO/IEC 27001:2022, the Statement of Applicability is a required documented output of the information security risk treatment process. It must contain the necessary controls, including whether they are implemented, and the justification for their inclusion. It must also include justification for excluding controls from Annex A when they are not applicable. Therefore, all three elements listed in options A, B, and C are part of a proper Statement of Applicability, making option D the correct answer.
=======

by Quinn at Jul 27, 2026, 02:01 PM

Limited Time Offer

15%

Off

Get Premium I27001F Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10