I27001F Exam Dumps : Certified ISO/IEC 27001:2022 Foundation

The three fundamental properties of information security are confidentiality, integrity, and availability, often referred to as the CIA triad. Confidentiality means information is accessible only to authorized persons or entities. Integrity means safeguarding the accuracy and completeness of information. Availability means information and associated assets are accessible and usable when required. These principles are foundational within ISO/IEC 27001 and ISO/IEC 27002. Therefore, option B is correct.

=======

In ISO/IEC 27001:2022, the Statement of Applicability is a required documented output of the information security risk treatment process. It must contain the necessary controls, including whether they are implemented, and the justification for their inclusion. It must also include justification for excluding controls from Annex A when they are not applicable. Therefore, all three elements listed in options A, B, and C are part of a proper Statement of Applicability, making option D the correct answer.

=======

Annex A of ISO/IEC 27001:2022 contains the reference set of information security controls used to support risk treatment decisions. In the 2022 edition, these controls are organized into four themes: organizational, people, physical, and technological controls. Annex A is not a set of ISMS implementation steps and it is not a risk management guideline. Its role is to provide a structured set of control objectives and controls that may be selected as part of risk treatment. Therefore, option B is the correct answer.

=======