ITPEC IP April 2023 Question 44
ITPEC IP April 2023 — Question 44 of 100
Check measures and evaluates whether information-security processes are effective. The organization monitors operations, measures results against objectives, reviews incidents and audits, and determines whether the ISMS and its controls perform as intended. The evidence then supports corrective and improvement decisions.
Answer (d)
Why not others:
- (a) establishing objectives, processes, and procedures is Plan
- (b) making corrective and preventive improvements based on evaluation is Act
- (c) introducing and operating the processes is Do
Key rule: PDCA means Plan what should happen, Do it, Check evidence and results, and Act to improve.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.