PECB ISO-IEC-27001-Lead-Implementer Exam With Confidence Using Practice Dumps

Based on his tasks, Bob is part of the incident response team (IRT) of InfoSec. According to the ISO/IEC 27001:2022 standard, an IRT is a group of individuals who are responsible for responding to information security incidents in a timely and effective manner. The IRT should have the authority, skills, and resources to perform the following activities:

Identify and analyze information security incidents and their impact

Contain, eradicate, and recover from information security incidents

Communicate with relevant stakeholders and authorities

Document and report on information security incidents and their outcomes

Review and improve the information security incident management process and controls

Bob’s job is to deploy a network architecture that can prevent potential attackers from accessing InfoSec’s private network, and to conduct a thorough evaluation of the nature and impact of any unexpected events that might occur. These tasks are aligned with the objectives and responsibilities of an IRT, as defined by the ISO/IEC 27001:2022 standard.

ISO/IEC 27001:2022, Information technology — Security techniques — Information security management systems — Requirements, Clause 10.2, Information security incident management

ISO/IEC 27035-1:2023, Information technology — Information security incident management — Part 1: Principles of incident management

ISO/IEC 27035-2:2023, Information technology — Information security incident management — Part 2: Guidelines to plan and prepare for incident response

PECB, ISO/IEC 27001 Lead Implementer Course, Module 10, Information security incident management

The correct answer is Option C, as it best upholds objectivity and impartiality while allowing the internal audit to proceed effectively.

ISO/IEC 27001:2022 Clause 9.2 – Internal audit requires that audits be conducted in a manner that ensures objectivity and impartiality. This requirement is further reinforced by ISO 19011, which states that auditors should not audit their own work and should avoid conflicts of interest.

In this scenario, the auditor:

Held daily operational responsibilities in the IT Department just three months ago.

Is now asked to audit the same department.

Although job descriptions clearly distinguish past and present roles, the risk of perceived or actual bias remains high due to the short time elapsed. A common best practice is a cooling-off period (often around one year), but ISO standards do not mandate a fixed duration.

Option A is incorrect because clear job descriptions alone do not eliminate bias risk.

Option B is too rigid; ISO/IEC 27001 does not mandate a one-year cooling-off period.

By conducting the audit jointly with a colleague from another department, the organization:

Preserves audit independence,

Introduces an objective perspective,

Mitigates conflict-of-interest concerns,

Remains compliant with Clause 9.2 and ISO 19011 guidance