ITPEC IP October 2024 Question 37
Topic: Security
Which of the following is the activity in A (Act) phase in the PDCA model adopted in an organization that operates an ISMS?
Explanation
Deciding improvements for flaws found by monitoring and evaluation — the Act phase of the ISMS PDCA cycle.
The ISMS cycle runs Plan, Do, Check, Act:
- •Plan: set the security policy, organisation and procedures: option (c)
- •Do: communicate the policy, install and operate the measures: option (d)
- •Check: monitor operations and measure and evaluate the results: option (b)
- •Act: decide and make improvements for the problems Check revealed: option (a)
Answer (a)
Why not others:
- •(b) — monitoring and measuring results is Check
- •(c) — creating the policy, organisation and procedures is Plan
- •(d) — communicating the policy and operating the measures is Do
Key rule: Act always follows Check: it acts on what the evaluation found and feeds the improvements into the next Plan.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.