Exam ISO-IEC-27001-Lead-Implementer Topic 1 Question 99 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam
Question #: 99
Topic #: 1
NoAVision is a mid-sized cybersecurity solutions provider based in Tartu, Estonia, with satellite offices in Stockholm and Berlin. The company specializes in secure cloud hosting, identity and access management (IAM), and digital certificate lifecycle management. Its clients span the government, financial services, and healthcare sectors, including national ministries, private hospitals, and fintech firms operating across the European Economic Area (EEA). To have a structured approach to safeguarding sensitive information, NoAVision decided to implement an information security management system (ISMS) based on ISO/IEC
27001. During the planning and design phases, the company relied on an ISO guidance document that interpreted each clause of the standard. Rather than introducing additional requirements, the document offered practical recommendations, implementation alternatives, and contextual insights, enabling the company to avoid ambiguity and develop a functional ISMS.
Which document did NoAVision rely on during the planning and design phases of the ISMS implementation?

Suggested Answer: C Vote an answer

ISO/IEC 27003 is the official guidance document for ISO/IEC 27001. It interprets each clause of the standard without introducing new mandatory requirements. Instead, it provides practical recommendations, implementation options, and contextual insights to help organizations understand and apply each requirement effectively. This aligns perfectly with the scenario description - the document " interpreted each clause " and
" offered practical recommendations and implementation alternatives. " ISO/IEC 27701 extends ISO/IEC
27001 for privacy (PIMS), and PCI DSS is a payment card security standard. Neither fits the described role.
Per ISO/IEC 27003:2017, it serves as a guide to support organizations in implementing an ISMS in accordance with ISO/IEC 27001 by offering rationale and explanation for each requirement.

by Christian at Oct 01, 2026, 03:41 PM

Limited Time Offer

15%

Off

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10