ISO-IEC-27001-LEAD-IMPLEMENTER practice question 7 of 35
Scenario 7: CyTekShield CyTekShield based in Dublin. Ireland, is a cybersecurity consulting provider specializing in digital risk management and…
Full set: 290 questionsDomain Implementing an ISMS based on ISO/IEC 27001
The scenario indicates that CyTekShield has appropriately addressed the handling of evidence. It explicitly states the company has "established internal procedures" to ensure evidence is "properly identified, collected, and preserved." These procedures cover various storage mediums and the safeguarding of evidence in its original state. Furthermore, a "specialized expert in forensic investigations" (Niamh) is responsible for this process, and the company's incident management policy details the types, storage, format, and content of records. This structured approach, led by a competent professional and supported by formal policy and procedure, directly aligns with the control objectives for evidence collection within an Information Security Management System (ISMS).
A. No – as it does not include proper training for staff involved in evidence handling The scenario implies competence by stating a "specialized expert in forensic investigations" is responsible. The presence of an expert leading the process addresses the need for skilled handling of evidence.
C. No – because the process of evidence acquisition was not fully detailed The scenario confirms that procedures for evidence "collection" (acquisition) exist. A summary scenario is not expected to contain the full, step-by-step procedural document, but it confirms the process is formally established. ---
1. ISO/IEC 27001:2022 - Information security, cybersecurity and privacy protection — Information security management systems — Requirements.
Reference: Annex A, Control A.5.28 "Collection of evidence". This control requires the organization to "establish and implement procedures for the identification, collection, acquisition and preservation of evidence related to information security events." The actions described for CyTekShield directly map to implementing this control.
2. ISO/IEC 27002:2022 - Information security, cybersecurity and privacy protection — Information security controls.
Reference: Section 5.28 "Collection of evidence". The implementation guidance for this control advises that procedures should be defined and should ensure the integrity and authenticity of collected evidence. CyTekShield's approach of safeguarding evidence "in its original state" and having a forensics expert manage the process aligns with this guidance.
3. PECB Group Inc. (2022). ISO/IEC 27001 Lead Implementer Training Course Material.
Reference: Module: "Annex A Controls". The courseware explains that control A.5.28 is satisfied by creating and maintaining formal procedures for evidence handling to ensure it is admissible in legal or disciplinary proceedings. CyTekShield's documented internal procedures and policies fulfill this requirement.
4. Rowlingson, R. (2004). A ten step process for forensic readiness. International Journal of Digital Evidence, 2(3), 1-28.
Reference: This foundational academic paper on forensic readiness outlines the necessity of having pre-defined procedures for evidence collection and preservation before an incident occurs. CyTekShield's proactive establishment of internal procedures aligns with this principle, demonstrating appropriate handling.
Keep practicing
Take the free ISO-IEC-27001-LEAD-IMPLEMENTER practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other ISO-IEC-27001-LEAD-IMPLEMENTER practice questions
- Question 1Scenario 2: Beauty is a well-established cosmetics company in the beauty industry. The co…
- Question 2What category of decision-making does the implementation of an ISMS belong to within an o…
- Question 3During a security audit, analysts discover that an attacker repeatedly queried a black-bo…
- Question 4Who is responsible for ensuring that the ISMS achieves its intended outcomes?
- Question 5Scenario 8: SunDee is a biopharmaceutical firm headquartered in California, US. Renowned …
- Question 6Scenario 2: Beauty is a cosmetics company that has recently switched to an e-commerce mod…
