Exam ISO-IEC-27001-Lead-Implementer Topic 1 Question 280 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam
Question #: 280
Topic #: 1
The incident management process of an organization enables them to prepare for and respond to information security incidents. In addition, the organization has procedures in place for assessing information security events. According to ISO/IEC 27001, what else must an incident management process include?

Suggested Answer: A Vote an answer

According to ISO/IEC 27001, an incident management process must include processes for using knowledge gained from information security incidents to reduce the likelihood or impact of future incidents, and to improve the overall level of information security. This means that the organization should conduct a root cause analysis of the incidents, identify the lessons learned, and implement corrective actions to prevent recurrence or mitigate consequences. The organization should also document and communicate the results of the incident management process to relevant stakeholders, and update the risk assessment and treatment plan accordingly.
(Must be taken from ISO/IEC 27001 : 2022 Lead Implementer resources)
References: ISO/IEC 27001 : 2022 Lead Implementer Study guide and documents, specifically:
* ISO/IEC 27001:2022, clause 10.2 Nonconformity and corrective action
* ISO/IEC 27001:2022, Annex A.16 Information security incident management
* ISO/IEC TS 27022:2021, clause 7.5.3.16 Information security incident management process
* PECB ISO/IEC 27001 Lead Implementer Course, Module 9: Incident Management

by Jay at Nov 08, 2025, 11:29 AM

Limited Time Offer

15%

Off

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10