Here are all the actual test exam dumps for IT exams. Most people prepare for the actual exams with our test dumps to pass their exams. So it's critical to choose and actual test pdf to succeed.

Exam ISO-IEC-27001-Lead-Implementer Topic 4 Question 236 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam
Question #: 236
Topic #: 4
Which security controls must be implemented to comply with ISO/IEC 27001?

Suggested Answer: B Vote an answer

ISO/IEC 27001:2022 does not prescribe a specific set of security controls that must be implemented by all organizations. Instead, it allows organizations to select and implement the controls that are appropriate for their context, based on the results of a risk assessment and a risk treatment plan. The risk treatment plan is a document that specifies the actions to be taken to address the identified risks, including the selection of controls from Annex A or other sources, the allocation of responsibilities, the expected outcomes, the priorities and the resources. Therefore, the security controls that must be implemented to comply with ISO
/IEC 27001 are those that are included in the risk treatment plan, which may vary from one organization to another.
ISO/IEC 27001:2022, clause 6.1.3
PECB ISO/IEC 27001 Lead Implementer Course, Module 5, slide 18

by Kelly at Mar 10, 2026, 01:12 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.