ISO-IEC-27001-LEAD-IMPLEMENTER practice question 11 of 35
Scenario 1: NobleFind is an online retailer specializing in high-end, custom-design furniture. The company offers a wide range of handcrafted pieces…
Choose your answer, then check it against the explanation.
Scenario 1: NobleFind is an online retailer specializing in high-end, custom-design furniture. The
company offers a wide range of handcrafted pieces tailored to meet the needs of residential and
commercial clients. NobleFind also provides expert design consultation services. Despite NobleFind's
efforts to keep its online shop platform secure, the company faced persistent issues, including a
recent data breach. These ongoing challenges disrupted normal operations and underscored the
need for enhanced security measures. The designated IT team quickly responded to resolve the
problem. To address these issues, NobleFind decided to implement an Information Security
Management System (ISMS) based on ISO/IEC 27001 to improve security, protect customer data, and
ensure the stability of its services.
In addition to its commitment to information security, NobleFind focuses on maintaining the
accuracy and completeness of its product dat
a. This is ensured by carefully managing version control, checking information regularly, enforcing
strict access policies, and implementing backup procedures. Moreover, product details and customer
designs are accessible only to authorized individuals, with security measures such as multi-factor
authentication and data access policies.
NobleFind has implemented an incident investigation process within its ISMS, as part of its
comprehensive approach to information security. Additionally, it has established record retention
policies to ensure that online information about each product and client information remains readily
accessible and usable on demand for authorized entities. NobleFind established an information
security policy offering clear guidelines for safeguarding historical data. It also insisted that personnel
sign confidentiality agreements and were committed to recruiting only qualified individuals.
Additionally, NobleFind implemented measures for monitoring the resources used by its systems,
reviewing user access rights, and conducting a thorough analysis of audit logs to swiftly identify and
address any security anomalies.
With its ISMS in place, NobleFind maintains and safeguards documented information, encompassing
a wide range of data, records, and specifications. This documented information is vital to its
operations, ensuring the security and integrity of customer data, historical records, and financial
information.
According to scenario 1, which detective control did NobleFind implement?
Question 11 of 35
Keep practicing
Take the free ISO-IEC-27001-LEAD-IMPLEMENTER practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other ISO-IEC-27001-LEAD-IMPLEMENTER practice questions
- Question 1Scenario 2: Beauty is a well-established cosmetics company in the beauty industry. The co…
- Question 2What category of decision-making does the implementation of an ISMS belong to within an o…
- Question 3During a security audit, analysts discover that an attacker repeatedly queried a black-bo…
- Question 4Who is responsible for ensuring that the ISMS achieves its intended outcomes?
- Question 5Scenario 8: SunDee is a biopharmaceutical firm headquartered in California, US. Renowned …
- Question 6Scenario 2: Beauty is a cosmetics company that has recently switched to an e-commerce mod…
