Free ISO-IEC-27001-LEAD-IMPLEMENTER Web TestEngine Demo

Q10 Single choice

An organization documented each security control that it Implemented by describing their functions in detail.
Is this compliant with ISO/IEC 27001?

A
No, the standard requires to document only the operation of processes and controls, so no description of each security control is needed
B
No, because the documented information should have a strict format, including the date, version number and author identification
C
Yes, but documenting each security control and not the process in general will make it difficult to review the documented information

ISO-IEC-27001-LEAD-IMPLEMENTER Web TestEngine demo