PECB ISO/IEC 27001:2022 Foundation Practice Tests

Explanation

Amendment 1:2024, published in February 2024, added requirements to Clause 4.1 and Clause 4.2 to consider whether climate change is a relevant issue and whether interested parties have requirements related to climate change. This amendment is part of the current ISO/IEC 27001:2022 standard.

Explanation

Risk is defined as the effect of uncertainty on objectives. A threat is a potential cause of an incident. A vulnerability is a weakness that can be exploited. An incident is a single or series of unwanted events that compromise security. Only risk captures the uncertainty regarding objectives.

Explanation

Accountability ensures that actions can be traced uniquely to an entity, allowing for responsibility to be assigned. Authenticity verifies identity, Non-repudiation prevents denial of actions, and Integrity ensures accuracy. While related, accountability is the specific property of traceability to an entity.

Explanation

The four themes of Annex A controls in ISO/IEC 27001:2022 are Organizational, People, Physical, and Technological. 'Procedural' is not a theme in the 2022 edition; this term or similar concepts may have been part of the older 2013 structure or are simply incorrect distractors.

Explanation

Fire is a potential cause of an unwanted incident (damage to assets), making it a threat. A vulnerability would be a lack of fire suppression systems. Risk is the potential loss resulting from the fire exploiting that vulnerability.