ITPEC IP October 2024 Question 37
ITPEC IP October 2024 — Question 37 of 100
The Act phase decides and carries out improvements for flaws revealed by monitoring and evaluation. In an ISMS PDCA cycle, results from the Check phase are reviewed, and corrective or preventive improvements are chosen so that weaknesses do not persist and the management system continually improves.
Answer (a)
Why not others:
- (b) monitoring operations and measuring results belong to Check
- (c) establishing policy, organization, objectives, and procedures belongs to Plan
- (d) communicating the policy and operating security controls belongs to Do
Key rule: PDCA maps to Plan the controls, Do the work, Check the results, and Act on what the evaluation shows should be improved.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.