Free ISO-27001-LA Web TestEngine Demo

Q1 Multiple choice

You are conducting a third-party surveillance audit when another member of the audit team approaches you seeking clarification. They have been asked to assess the organisation's application of control 5.7 -
Threat Intelligence. They are aware that this is one of the new controls introduced in the 2022 edition of ISO/IEC 27001, and they want to make sure they audit the control correctly.

They have prepared a checklist to assist them with their audit and want you to confirm that their planned activities are aligned with the control's requirements.

Which three of the following options represent valid audit trails?

Select all that apply.

A
I will determine whether internal and external sources of information are used in the production of threat intelligence
B
I will ensure that the task of producing threat intelligence is assigned to the organisation's internal audit team
C
I will ensure that the organisation's risk assessment process begins with effective threat intelligence
D
I will check that the organisation has a fully documented threat intelligence process
E
I will check that threat intelligence is actively used to protect the confidentiality, integrity and availability of the organisation's information assets
F
I will speak to top management to make sure all staff are aware of the importance of reporting threats
G
I will ensure that appropriate measures have been introduced to inform top management as to the effectiveness of current threat intelligence arrangements
H
I will review how information relating to information security threats is collected and evaluated to produce threat intelligence

ISO-27001-LA Web TestEngine demo