ISO-IEC-27001-LEAD-AUDITOR practice question 6 of 35
Scenario: Northstorm is an online retail shop offering unique vintage and modern accessories. It initially entered a small market but gradually grew…
Choose your answer, then check it against the explanation.
Scenario:
Northstorm is an online retail shop offering unique vintage and modern accessories. It initially
entered a small market but gradually grew thanks to the development of the overall e-commerce
landscape. Northstorm works exclusively online and ensures efficient payment processing, inventory
management, marketing tools, and shipment orders. It uses prioritized ordering to receive, restock,
and ship its most popular products.
Northstorm has traditionally managed its IT operations by hosting its website and maintaining full
control over its infrastructure, including hardware, software, and data administration. However, this
approach hindered its growth due to the lack of responsive infrastructure. Seeking to enhance its e-
commerce and payment systems, Northstorm opted to expand its in-house data centers, completing
the expansion in two phases over three months. Initially, the company upgraded its core servers,
point-of-sale, ordering, billing, database, and backup systems. The second phase involved improving
mail, payment, and network functionalities. Additionally, during this phase, Northstorm adopted an
international standard for personally identifiable information (PII) controllers and PII processors
regarding PII processing to ensure its data handling practices were secure and compliant with global
regulations.
Despite the expansion, Northstorm's upgraded data centers failed to meet its evolving business
demands. This inadequacy led to several new challenges, including issues with order prioritization.
Customers reported not receiving priority orders, and the company struggled with responsiveness.
This was largely due to the main server's inability to process orders from YouDecide, an application
designed to prioritize orders and simulate customer interactions. The application, reliant on
advanced algorithms, was incompatible with the new operating system (OS) installed during the
upgrade.
Faced with urgent compatibility issues, Northstorm quickly patched the application without proper
validation, leading to the installation of a compromised version. This security lapse resulted in the
main server being affected and the company's website going offline for a week. Recognizing the
need for a more reliable solution, the company decided to outsource its website hosting to an e-
commerce provider. The company signed a confidentiality agreement concerning product ownership
and conducted a thorough review of user access rights to enhance security before transitioning.
Based on Scenario 1, which international standard did Northstorm adopt during the second phase of
expansion?
Question 6 of 35
Keep practicing
Take the free ISO-IEC-27001-LEAD-AUDITOR practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other ISO-IEC-27001-LEAD-AUDITOR practice questions
- Question 1In the context of a third-party certification audit, it is very important to have effecti…
- Question 2You are performing an ISMS audit at a residential nursing home called ABC that provides h…
- Question 4Scenario 6: Sinvestment is an insurance company that offers home, commercial, and life in…
- Question 5Which six of the following actions are the individual(s) managing the audit programme res…
- Question 7In the context of a third-party certification audit, confidentiality is an issue in an au…
- Question 9Scenario 4: Branding is a marketing company that works with some of the most famous compa…
